NVD

Id
11172  
Name
CVE-2011-4834  
Description
The GetInstalledPackages function in the configuration tool in HP Application Lifestyle Management (ALM) 11 on AIX, HP-UX, and Solaris allows local users to gain privileges via (1) a Trojan horse /tmp/tmp.txt FIFO or (2) a symlink attack on /tmp/tmp.txt.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-12-14  
Modified Date
2011-12-15  
Seq
2011-4834  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
61899 11172 CVE-2011-4834 http://0a29.blogspot.com/2011/12/0a29-11-2-privilege-escalation.html  View
61900 11172 CVE-2011-4834 20111208 0A29-11-2 : Privilege escalation vulnerability in HP Application Lifestyle Management (ALM) Platform v11  View
61901 11172 CVE-2011-4834 hp-alm-symlink(71698)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33169 JVNDB-2011-003409 HP ALM 内の getInstalledPackages 関数における権限を取得される脆弱性 AIX、HP-UX、および Solaris 上で稼働する HP Application Lifecycle Management (ALM) 内の getInstalledPackages 関数には、権限を取得される脆弱性が存在します。 CVE-2011-4834 52741 CVE-2011-4834 11172 4.6 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003409.html 2011-12-15 2011-12-19 View