CVE-2003-1461: Buffer Overflow
Buffer overflow in rwrite for HP-UX 11.0 could allow local users to execute arbitrary code via a long argument. NOTE: the vendor was unable to reproduce the problem on a system that had been patched for an lp vulnerability (CVE-2002-1473).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Operational
On HP-UX 11.0 systems, ensure the lp vulnerability patch addressing CVE-2002-1473 has been applied and verified (vendor noted the rwrite overflow could not be reproduced on systems patched for CVE-2002-1473).
Event History
Frequently Asked Questions
What is the severity of CVE-2003-1461?
CVE-2003-1461 is classified as a medium severity vulnerability due to the potential for local users to execute arbitrary code.
How do I fix CVE-2003-1461?
The recommended fix for CVE-2003-1461 is to apply patches or updates provided by HPE for HP-UX 11.0.
Who is affected by CVE-2003-1461?
CVE-2003-1461 affects local users of HP-UX 11.0 who can leverage the buffer overflow vulnerability.
What type of vulnerability is CVE-2003-1461?
CVE-2003-1461 is a buffer overflow vulnerability found in the rwrite function for HP-UX 11.0.
What are the potential consequences of CVE-2003-1461?
The potential consequences of CVE-2003-1461 include the execution of arbitrary code, leading to unauthorized control of the affected system.