CVE-2003-0089: Buffer Overflow
Buffer overflow in the Software Distributor utilities for HP-UX B.11.00 and B.11.11 allows local users to execute arbitrary code via a long LANG environment variable to setuid programs such as (1) swinstall and (2) swmodify.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Identify the installed swinstall and swmodify binaries on each affected HP-UX system and remove their setuid bit (for example, run: chmod u-s <path-to-swinstall> <path-to-swmodify>) so they no longer run with elevated privileges.
swinstall, swmodify (HP-UX Software Distributor utilities) setuid = remove - Compensating control
Restrict which local accounts can execute swinstall and swmodify by tightening filesystem permissions or using ACLs so only trusted administrative users can run these utilities; combine with limiting interactive/local access to systems for untrusted accounts.
Event History
Frequently Asked Questions
What is the severity of CVE-2003-0089?
CVE-2003-0089 is classified as a high severity vulnerability due to its potential for local users to execute arbitrary code.
How do I fix CVE-2003-0089?
To mitigate CVE-2003-0089, users should update their HP-UX systems to the latest patches provided by Hewlett-Packard.
Who is affected by CVE-2003-0089?
CVE-2003-0089 affects local users of HP-UX versions B.11.00 and B.11.11.
What causes CVE-2003-0089?
CVE-2003-0089 is caused by a buffer overflow vulnerability in the Software Distributor utilities when handling long LANG environment variables.
Can CVE-2003-0089 be exploited remotely?
CVE-2003-0089 cannot be exploited remotely as it requires local user access to affected HP-UX systems.