CVE-2001-1564

HP-UX 10.01-11.11 - Denial of Service via Core File Size Limit Bypass

Title source: llm
STIX 2.1

Description

setrlimit in HP-UX 10.01, 10.10, 10.24, 10.20, 11.00, 11.04 and 11.11 does not properly enforce core file size on processes after setuid or setgid privileges are dropped, which could allow local users to cause a denial of service by exhausting available disk space.

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5159
Third Party Advisory vendor-advisory x_refsource_hp
http://archives.neohapsis.com/archives/hp/2001-q3/0000.html
Third Party Advisory vdb-entry x_refsource_xf
http://www.iss.net/security_center/static/6810.php
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/3416

Scores

EPSS 0.0024
EPSS Percentile 47.6%

Details

Status published
Products (7)
hp/hp-ux 10.01
hp/hp-ux 10.10
hp/hp-ux 10.20
hp/hp-ux 10.24
hp/hp-ux 11.00
hp/hp-ux 11.04
hp/hp-ux 11.11
Published Dec 31, 2001
Tracked Since Feb 18, 2026