HP CIFS-9000 Server up to A.01.06 Sharity Package -U/-D/-P/-S/-N/-u memory corruption

Summaryinfo

A vulnerability was found in HP CIFS-9000 Server up to A.01.06. It has been classified as problematic. The impacted element is an unknown function of the component Sharity Package. The manipulation of the argument -U/-D/-P/-S/-N/-u leads to memory corruption. This vulnerability is referenced as CVE-2002-0991. Furthermore, an exploit is available.

Detailsinfo

A vulnerability was found in HP CIFS-9000 Server up to A.01.06 and classified as critical. This issue affects an unknown code block of the component Sharity Package. The manipulation of the argument -U/-D/-P/-S/-N/-u with an unknown input leads to a memory corruption vulnerability. Using CWE to declare the problem leads to CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

Buffer overflows in the cifslogin command for HP CIFS/9000 Client A.01.06 and earlier, based on the Sharity package, allows local users to gain root privileges via long (1) -U, (2) -D, (3) -P, (4) -S, (5) -N, or (6) -u parameters.

The weakness was published 10/04/2002 by Alex Hernandez (Website). The advisory is shared at archives.neohapsis.com. The identification of this vulnerability is CVE-2002-0991. The exploitation is known to be easy. An attack has to be approached locally. No form of authentication is needed for a successful exploitation. Technical details as well as a public exploit are known.

A public exploit has been developed in ANSI C. The exploit is available at securityfocus.com. It is declared as proof-of-concept. We expect the 0-day to have been worth approximately $25k-$100k.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the databases at X-Force (9431), Exploit-DB (21577) and SecurityFocus (BID 5088†). Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Vendor

• HP

Name

• CIFS-9000 Server

Version

• A.01.06

License

• commercial

Website

• Vendor: https://www.hp.com/

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion