CVE-2001-0105: Low severity HPE HP-UX vulnerability

Published Feb 12, 2001

Updated

Vulnerability in top in HP-UX 11.04 and earlier allows local users to overwrite files owned by the "sys" group.

Affected Software

2 affected components

HPE HP-UX=11

HPE HP-UX=10

Remediation

Patch Available

http://archives.neohapsis.com/archives/hp/2000-q4/0079.html

Event History

Feb 12, 2001

CVE Published

05:00 AM

May 7, 2001

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-0105?

CVE-2001-0105 is classified as a high-severity vulnerability due to its potential for local users to overwrite critical system files.

How do I fix CVE-2001-0105?

To fix CVE-2001-0105, it is recommended to update HP-UX to a version later than 11.04 which addresses this vulnerability.

What systems are affected by CVE-2001-0105?

CVE-2001-0105 affects HP-UX versions 11.04 and earlier, as well as earlier versions like HP-UX 10.

What is the impact of CVE-2001-0105?

The impact of CVE-2001-0105 includes the potential for local users to overwrite files owned by the 'sys' group, leading to privilege escalation and system compromise.

Who is at risk from CVE-2001-0105?

Local users on systems running affected HP-UX versions are at risk of exploiting CVE-2001-0105 to gain unauthorized access or control.