Exploitation Summary
EIP tracks 3 public exploits for CVE-2002-1473.
PoCs published by Metasploit, H D Moore, hdm, including Metasploit module exploits/hpux/lpd/cleanup_exec.
AI-analyzed exploit summary This Metasploit module exploits an unpublished vulnerability in HP-UX LPD service (CVE-2002-1473) to execute arbitrary commands as root. It sends a malformed job request with an embedded payload, followed by a fake control file, and triggers a cleanup routine hijack.
Description
Multiple buffer overflows in lp subsystem for HP-UX 10.20 through 11.11 (11i) allow local users to cause a denial of service and possibly execute arbitrary code.
Exploits (3)
This Metasploit module exploits an unpublished vulnerability in HP-UX LPD service (CVE-2002-1473) to execute arbitrary commands as root. It sends a malformed job request with an embedded payload, followed by a fake control file, and triggers a cleanup routine hijack.
This Metasploit module exploits an unpublished vulnerability in the HP-UX LPD service (CVE-2002-1473) to achieve remote command execution as root. It sends a malformed job request with an embedded command payload, followed by a fake control file, and triggers an error to hijack the cleanup routine.
This Metasploit module exploits an unpublished vulnerability in the HP-UX LPD service (CVE-2002-1473) to achieve remote command execution as root. It sends a malformed job request with an embedded payload, followed by a fake control file, and triggers a cleanup routine hijack.