CVE-2006-1248 Privilege escalation in n/a
Local attackers with high privileges can exploit usermod to alter file ownership, potentially leading to privilege escalation or insecure permissions.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2006-1248?
CVE-2006-1248 is a medium-severity vulnerability in Hp Hp-Ux, published on 17 Mar 2006. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Unspecified vulnerability in usermod in HP-UX B.11.00, B.11.11, and B.11.23, when run with certain options that involve a new home directory, might cause usermod to change the ownership of all directories and files under the new directory, which might result in less secure permissions than intended.
Which versions are affected by CVE-2006-1248?
It affects 1 product.
Products include Hp Hp-Ux.
How do I fix CVE-2006-1248?
No fix has been published for CVE-2006-1248 yet. Limit exposure of the affected software until one is available.
Is CVE-2006-1248 being exploited?
There is no known exploitation of CVE-2006-1248 in the wild and no public exploit code.
Other vulnerabilities in Hp Hp-Ux
Sources
Also known as GHSA-2rcg-6729-3c5c.