header-logo
Suggest Exploit
vendor:
HP-UX
by:
Unknown
7.5
CVSS
HIGH
Boundary Condition Error
119
CWE
Product Name: HP-UX
Affected Version From: Unknown
Affected Version To: Unknown
Patch Exists: NO
Related CWE: Not provided
CPE: o:hp:hp-ux
Metasploit:
Other Scripts:
Platforms Tested: Not specified
Unknown

Boundary Condition Error in rexec program on HP-UX

A boundary condition error has been reported in the rexec program included with some versions of HP-UX. This vulnerability can be exploited by a local user to gain elevated privileges on the system.

Mitigation:

It is recommended to update to a patched version of HP-UX that addresses this vulnerability.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/7459/info

It has been reported that a problem in the rexec program included with some versions of HP-UX may be vulnerable to a boundary condition error. It may be possible for a local user to exploit this vulnerability to gain elevated privileges on the system. 

exec 127.0.0.1 -l `perl -e 'printf "A" x 9777'` -n something