This application requires Javascript for optimal performance.

HP.UX.LPD.Arbitrary.Command.Execution

Alias(es)

HP-UX.LPD.Arbitrary.Command.Execution

Release Date

Oct 20, 2005

Severity

high

Impact

Compromise of the system.

Description

This indicates an attempt to exploit a vulnerability in HP-UX lpd. The vulnerability allows an unauthenticated attacker to execute arbitrary commands with the privileges of the root user.

Affected Products

HP HP-UX 10.20
HP HP-UX B.11.11
HP HP-UX B.11.00

Recommended Actions

Update to the latest version.
See HP Security Bulletin HPSBUX0208-213

Coverage

IPS
VCM

Common Vulnerabilities and Exposures (CVE)

CVE-2005-3277

Reference/s

http://www.securityfocus.com/bid/15136 (BugTraq)

Reference: VID-11250