Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2003-1461 — Improper Restriction of Operations within the Bounds of a Memory Buffer in HP Hp-ux

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer4 documents4 sources
Severity
7.2HIGHNVD
CNA4.6
EPSS
0.3%
top 51.43%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
HP Hp-ux
Timeline
PublishedDec 31
Latest updateApr 29

Description

Buffer overflow in rwrite for HP-UX 11.0 could allow local users to execute arbitrary code via a long argument. NOTE: the vendor was unable to reproduce the problem on a system that had been patched for an lp vulnerability (CVE-2002-1473).

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages1 packages

▶NVDhp/hp-ux11.00

Patches

Patch: www.securityfocus.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-69q2-4j65-gwmx: Buffer overflow in rwrite for HP-UX 11↗2022-04-29
▶
CVEList
CVE-2003-1461: Buffer overflow in rwrite for HP-UX 11↗2007-10-23
▶

💥Exploits & PoCs

1
Exploit-DB
HP-UX 11 RWrite - Buffer Overflow↗2003-05-02
▶