First published: Sat Aug 31 2002(Updated: )
Buffer overflows in the cifslogin command for HP CIFS/9000 Client A.01.06 and earlier, based on the Sharity package, allows local users to gain root privileges via long (1) -U, (2) -D, (3) -P, (4) -S, (5) -N, or (6) -u parameters.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
HP CIFS/9000 Server | =a.01.06 | |
HP CIFS/9000 Server | =a.01.05 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2002-0991 has a critical severity rating due to its potential to allow local users to gain root privileges.
To fix CVE-2002-0991, upgrade to a patched version of HP CIFS/9000 Client that addresses the buffer overflow vulnerabilities.
CVE-2002-0991 affects local users of HP CIFS/9000 Server versions A.01.06 and A.01.05.
CVE-2002-0991 is classified as a buffer overflow vulnerability.
CVE-2002-0991 cannot be exploited remotely as it requires local user access to the affected system.