News
Vigil@nce - HP-UX: read-write access via VxFS
July 2016 by Vigil@nce
This bulletin was written by Vigil@nce : https://vigilance.fr/offer
SYNTHESIS OF THE VULNERABILITY
A local attacker can bypass access restrictions of VxFS of HP-UX,
in order to read or alter files.
Impacted products: HP-UX.
Severity: 2/4.
Creation date: 10/05/2016.
DESCRIPTION OF THE VULNERABILITY
The HP-UX product uses the VxFS (JFS) filesystem.
However, ACLs are not correctly applied when they are inherited.
A local attacker can therefore bypass access restrictions of VxFS
of HP-UX, in order to read or alter files.
ACCESS TO THE COMPLETE VIGIL@NCE BULLETIN
https://vigilance.fr/vulnerability/HP-UX-read-write-access-via-VxFS-19567
