[Forgot Password]
Login  Register Subscribe

30481

 
 

423868

 
 

256488

 
 

909

 
 

199193

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2007-0805Date: (C)2007-02-07   (M)2023-12-22


The ps (/usr/ucb/ps) command on HP Tru64 UNIX 5.1 1885 allows local users to obtain sensitive information, including environment variables of arbitrary processes, via the "auxewww" argument, a similar issue to CVE-1999-1587.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 2.1
Exploit Score: 3.9
Impact Score: 2.9
 
CVSS V2 Metrics:
Access Vector: LOCAL
Access Complexity: LOW
Authentication: NONE
Confidentiality: PARTIAL
Integrity: NONE
Availability: NONE
  
Reference:
SECTRACK-1017592
SECTRACK-1018005
http://www.securityfocus.com/archive/1/459275/100/0/threaded
http://www.securityfocus.com/archive/1/459266/100/0/threaded
http://www.securityfocus.com/archive/1/459593/100/200/threaded
SECUNIA-24041
SECUNIA-25135
OSVDB-33113
ADV-2007-1654
HPSBTU02179
http://rawlab.mindcreations.com/codes/exp/nix/osf1tru64ps.ksh
tru64-ps-information-disclosure(32276)

CPE    1
cpe:/o:hp:tru64:5.1

© SecPod Technologies