CVE-2003-1374: Buffer Overflow
Buffer overflow in disable of HP-UX 11.0 may allow local users to execute arbitrary code via a long argument to the (1) -r or (2)-c options.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Avoid supplying long arguments to the -r or -c options of the 'disable' command on HP-UX 11.0; update scripts and user procedures to ensure these options are not invoked with long argument strings.
disable (HP-UX 11.0) usage of -r and -c options = do not supply long arguments
Event History
Frequently Asked Questions
What is the severity of CVE-2003-1374?
CVE-2003-1374 is classified as a high severity vulnerability due to the potential for local users to execute arbitrary code.
How do I fix CVE-2003-1374?
To mitigate CVE-2003-1374, it is recommended to apply the latest security patches provided by HP for HP-UX 11.0.
Who is affected by CVE-2003-1374?
Local users of HP-UX 11.0 are affected by CVE-2003-1374 due to a buffer overflow vulnerability.
What exploit can be performed with CVE-2003-1374?
An attacker can exploit CVE-2003-1374 to execute arbitrary code on a vulnerable HP-UX 11.0 system.
How does CVE-2003-1374 work?
CVE-2003-1374 works by allowing a buffer overflow via long arguments to the -r or -c options, enabling code execution.