CVE-2011-4834 – HP Application Lifestyle Management 11 - 'GetInstalledPackages' Local Privilege Escalation

https://notcve.org/view.php?id=CVE-2011-4834

The GetInstalledPackages function in the configuration tool in HP Application Lifestyle Management (ALM) 11 on AIX, HP-UX, and Solaris allows local users to gain privileges via (1) a Trojan horse /tmp/tmp.txt FIFO or (2) a symlink attack on /tmp/tmp.txt. La función GetInstalledPackages en la herramienta de configuración en HP Application Lifestyle Management (ALM) 11 en AIX, HP-UX, y Solaris permite a usuarios locales ganar privilegios a través de (1) un caballo de troya /tmp/tmp.txt FIFO o (2) un ataque symlink a /tmp/tmp.txt. • https://www.exploit-db.com/exploits/36430 http://0a29.blogspot.com/2011/12/0a29-11-2-privilege-escalation.html http://secunia.com/advisories/47040 http://www.securityfocus.com/archive/1/520783/100/0/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/71698 • CWE-264: Permissions, Privileges, and Access Controls •