CVE-2011-4834
4.6
Vector
AV:L/AC:L/Au:N/C:P/I:P/A:P
Exploitability: 3.9 / Impact: 6.4
Source: NVD
Description
The GetInstalledPackages function in the configuration tool in HP Application Lifestyle Management (ALM) 11 on AIX, HP-UX, and Solaris allows local users to gain privileges via (1) a Trojan horse /tmp/tmp.txt FIFO or (2) a symlink attack on /tmp/tmp.txt.
Affected (1)
Products: Hp: Application Lifestyle Management
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 11 |
| Running on/with | Platform Versions |
|---|---|
Hp Hp Ux | All versions |
Ibm Aix | All versions |
Sun Sunos | All versions |
Related CWEs
References (8)
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Timeline
No history available yet.