CVE-2002-2263: Medium severity HP HP-UX vulnerability
The installation program for HP-UX Visualize Conference B.11.00.11 running on HP-UX 11.00 and 11.11 installs /etc/dt and its subdirecties with insecure permissions, which allows local users to read or write arbitrary files.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Ensure /etc/dt and all contained files/directories are owned by root and do not grant non-root users write access. For example as root: chown -R root:root /etc/dt ; chmod -R u=rwX,go=rX /etc/dt (or: find /etc/dt -type d -exec chmod 755 {} \; && find /etc/dt -type f -exec chmod 644 {} \;). Verify no non-root accounts have write permission to any /etc/dt path.
HP-UX Visualize Conference B.11.00.11 on HP-UX 11.00 and 11.11 (/etc/dt and its subdirectories) filesystem permissions = owner root; remove write permission for non-root users (only root may write)
Event History
Frequently Asked Questions
What is the severity of CVE-2002-2263?
CVE-2002-2263 is considered a medium severity vulnerability due to its potential impact on file permissions.
How do I fix CVE-2002-2263?
To fix CVE-2002-2263, you should correct the permissions on /etc/dt and its subdirectories to restrict unauthorized access.
Which operating systems are affected by CVE-2002-2263?
CVE-2002-2263 affects HP-UX versions 11.00 and 11.11.
Can local users exploit CVE-2002-2263?
Yes, local users can exploit CVE-2002-2263 to read or write arbitrary files due to insecure permissions.
Is there a patch available for CVE-2002-2263?
No specific patch is mentioned for CVE-2002-2263; security best practices recommend updating permissions manually.