Published: 21/10/2005 Updated: 05/09/2008

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 1000

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

The LPD service in HP-UX 10.20 11.11 (11i) and previous versions allows remote malicious users to execute arbitrary code via shell metacharacters ("`" or single backquote) in a request that is not properly handled when an error occurs, as demonstrated by killing the connection, a different vulnerability than CVE-2002-1473.

Vulnerable Product	Search on Vulmon	Subscribe to Product
hp hp-ux 10.20
hp hp-ux 11.00
hp hp-ux 11.11

## # This file is part of the Metasploit Framework and may be redistributed # according to the licenses defined in the Authors field below In the # case of an unknown or missing license, this file defaults to the same # license as the core Framework (dual GPLv2 and Artistic) The latest # version of the Framework can always be obtained from metasp ...

NVD-CWE-Other http://www.frsirt.com/exploits/20051019.hpux_lpd_exec.pm.php http://archives.neohapsis.com/archives/hp/2002-q3/0064.html http://www.securityfocus.com/bid/15136 https://nvd.nist.gov https://www.exploit-db.com/exploits/1261/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2005-3277

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect