CVEvulnerability
CVE-2007-0805
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2007-02-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
Description
The ps (/usr/ucb/ps) command on HP Tru64 UNIX 5.1 1885 allows local users to obtain sensitive information, including environment variables of arbitrary processes, via the "auxewww" argument, a similar issue to CVE-1999-1587.
Affected configurations
• hp tru64 5.1
References
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00817515 h20000.www2.hp.com
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-February/052227.html lists.grok.org.uk
- http://osvdb.org/33113 osvdb.org
- http://rawlab.mindcreations.com/codes/exp/nix/osf1tru64ps.ksh Exploit
- http://secunia.com/advisories/24041 Vendor Advisory
- http://secunia.com/advisories/25135 secunia.com
- http://securitytracker.com/id?1017592 securitytracker.com
- http://www.securityfocus.com/archive/1/459266/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/459275/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/459593/100/200/threaded www.securityfocus.com
- http://www.securitytracker.com/id?1018005 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/1654 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32276 exchange.xforce.ibmcloud.com
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00817515 h20000.www2.hp.com
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-February/052227.html lists.grok.org.uk
- http://osvdb.org/33113 osvdb.org
- http://rawlab.mindcreations.com/codes/exp/nix/osf1tru64ps.ksh Exploit
- http://secunia.com/advisories/24041 Vendor Advisory
- http://secunia.com/advisories/25135 secunia.com
- http://securitytracker.com/id?1017592 securitytracker.com
- http://www.securityfocus.com/archive/1/459266/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/459275/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/459593/100/200/threaded www.securityfocus.com
- http://www.securitytracker.com/id?1018005 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/1654 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32276 exchange.xforce.ibmcloud.com