CVE

Id
3579  
CVE No.
CVE-2001-0772  
Status
Candidate  
Description
Buffer overflows and other vulnerabilities in multiple Common Desktop Environment (CDE) modules in HP-UX 10.10 through 11.11 allow attackers to cause a denial of service and possibly gain additional privileges.  
Phase
Modified (20090302)  
Votes
ACCEPT(4) Baker, Cole, Foat, Frech | NOOP(2) Armstrong, Wall | REVIEWING(1) Christey  
Comments
Christey> There is some overlap between CVE-2001-0551 and CVE-2001-0772. | CVE-2001-0551 describes a specific vulnerability in | dtprintinfo. HP acknowledges CVE-2001-0551 by stating | that the problem is fixed in HP:HPSBUX0105-151, which | is CVE-2001-0772. But CVE-2001-0772 is a vague advisory | that identifies other vulnerabilities (and vulnerability | types) besides CVE-2001-0551. Perhaps CVE-2001-0772 should | be RECAST to "remove" the reference to dtprintinfo and | leave the other vague descriptions. CVE-2001-0772 and | CVE-2001-0551 are very good examples of the problems that | CVE faces in being consistent with respect to the level of | abstraction, as documented in the CD:SF-CODEBASE, CD:SF-LOC, | and CD:VAGUE content decisions.  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
15752 3579 CVE-2001-0772 HP:HPSBUX0105-151  View
15753 3579 CVE-2001-0772 URL:http://archives.neohapsis.com/archives/hp/2001-q2/0044.html  View
15754 3579 CVE-2001-0772 OVAL:oval:org.mitre.oval:def:6022  View
15755 3579 CVE-2001-0772 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6022  View
15756 3579 CVE-2001-0772 XF:hpux-cde-bo(6585)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
64102 JVNDB-2001-000076 HP-UX の複数の CDE モジュール におけるバッファオーバーフローの脆弱性 ------------ CVE-2001-0772 3579 4.6 http://jvndb.jvn.jp/ja/contents/2001/JVNDB-2001-000076.html  View