Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
kmmodreg in HP-UX 11.11, 11.04 and 11.00 allows local users to create arbitrary world-writeable files via a symlink attack on the (1) /tmp/.kmmodreg_lock and (2) /tmp/kmpath.tmp temporary files.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
HPUX 11.0 kmmodreg 本地符号链接漏洞
Vulnerability Description
CVE(CAN) ID: CAN-2001-1256 HPUX 11.0 所带的kmmodreg程序存在一个符号链接攻击漏洞。 kmmodreg在执行时会在/tmp下创建两个文件： /tmp/.kmmodreg_lock 和 /tmp/kmpath.tmp 创建时没有检查这两个文件是否存在以及是不是符号链接。攻击者可以事先在/tmp 目录下创建两个符号链接，指向系统文件，当kmmodreg运行时，就会创建或改变系统文件 以及属性(666). 攻击者可以利用这个漏洞获取本地root权限。
CVSS Information
N/A
Vulnerability Type
N/A