HP Tru64 UNIX "ps" Command Information Disclosure - Secunia Advisories - Vulnerability Intelligence

HP Tru64 UNIX "ps" Command Information Disclosure
Secunia Advisory:	SA25135	Advisory Toolbox: Issue ticket Save in to-do list Mark as handled Exploit information Download as PDF Review actions Add comment
Release Date:	2007-05-04
Popularity:	8,138 views

Critical:	Less critical
Impact:	Exposure of sensitive information
Where:	Local system
Solution Status:	Vendor Patch

OS:	HP Tru64 UNIX 4.x HP Tru64 UNIX 5.x

Subscribe:	Instant alerts on relevant vulnerabilities

Description: A security issue has been reported in HP Tru64, which can be exploited by malicious, local users to gain knowledge of potentially sensitive information. The security issue is caused due to the "ps" command revealing the environment variables and values of all processes to an unprivileged user. This can potentially reveal certain information on processes that belong to the root user. The security issue affects the following versions: HP Tru64 UNIX v5.1B-4 HP Tru64 UNIX v5.1B-3 HP Tru64 UNIX v5.1A PK6 HP Tru64 UNIX v4.0G PK4 HP Tru64 UNIX v4.0F PK8 Solution: Install ERP Kits and edit the files "/etc/rc.config.common" for versions v5.1A PK6, v5.1B-3, or v5.2B-4 or "/etc/rc.config" for versions v4.0G PK4 and v4.0F PK8 (See vendor advisory for details). HP Tru64 UNIX Version v5.1B-4 ERP Kit: http://www.itrc.hp.com/service/patch/...hid=T64KIT1001143-V51BB27-ES-20070305 MD5 Checksum: 44b15d10895cf0606003a572b3310f9a HP Tru64 UNIX Version v5.1B-3 ERP Kit: http://www.itrc.hp.com/service/patch/...hid=T64KIT1001144-V51BB26-ES-20070305 MD5 Checksum: 67cfabb7cd3c422e2dc6bb6ed3d7d290 HP Tru64 UNIX Version v5.1A PK6 ERP Kit: http://www.itrc.hp.com/service/patch/...id=T64KIT1001145-V51AB24-ES-20070305 MD5 Checksum: de6885b166dba703af862ce05431e5cc HP Tru64 UNIX Version v4.0G PK4 ERP Kit: http://www.itrc.hp.com/service/patch/...hid=T64KIT1001179-V40GB22-ES-20070330 MD5 Checksum: 31129e60bb01ffdea015312c0e019fae HP Tru64 UNIX Version v4.0F PK8 ERP Kit: http://www.itrc.hp.com/service/patch/...hid=DUXKIT1001180-V40FB22-ES-20070330 MD5 Checksum: db9d634bb27f02642e00f149d6ebb8ee Provided and/or discovered by: Reported by the vendor. Original Advisory: HPSBTU02179 SSRT061256: http://itrc.hp.com/service/cki/docDisplay.do?docId=c00817515

Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released. Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

Latest Advisories

10th Oct, 2008

New advisories:	15
New vulnerabilities:	83
Updated advisories:	41

Moderately // 625 views

ScriptsEz Easy Image Downloader "id" File Disclosure Vulnerability

Moderately // 622 views

Built2go Real Estate Listings "event_id" SQL Injection

Highly // 888 views

Sun Java System Web Proxy Server FTP Subsystem Buffer Overflow

Moderately // 657 views

Red Hat update for cups

Highly // 662 views

DFF PHP Framework API "DFF_config[dir_incl ude]" File Inclusion Vulnerabilities

Not // 733 views

FUJITSU Interstage Products Apache Tomcat Security Bypass

Moderately // 980 views

Apple Mac OS X Security Update Fixes Multiple Vulnerabilities

Moderately // 637 views

Fedora update for condor

Moderately // 1,011 views

CUPS Multiple Vulnerabilities

Not // 699 views

Gentoo Portage Insecure Python Module Search Path Security Issue

Solutions | More...

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.