CVEvulnerability

CVE-2001-1564

2.1 LOW Published 2001-12-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2001-12-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:N/I:N/A:P

Description

setrlimit in HP-UX 10.01, 10.10, 10.24, 10.20, 11.00, 11.04 and 11.11 does not properly enforce core file size on processes after setuid or setgid privileges are dropped, which could allow local users to cause a denial of service by exhausting available disk space.

Affected configurations

• hp hp-ux 10.01 • hp hp-ux 10.10 • hp hp-ux 10.20 • hp hp-ux 10.24 • hp hp-ux 11.00 • hp hp-ux 11.04 • hp hp-ux 11.11

Related

Referenced by CWE · observed example (1)

  • CWE-274 Improper Handling of Insufficient Privileges weakness

References