CVE-2006-5556

Hp-ux - Buffer Overflow

Title source: rule

Description

Buffer overflow in the localtime_r function, and certain other functions, in libc in HP-UX B.11.11 and possibly other versions allows local users to execute arbitrary code via a long TZ environment variable.

Exploits (1)

exploitdb WORKING POC VERIFIED

by prdelka · clocalhp-ux

https://www.exploit-db.com/exploits/2636

View Code ZIP pw:eip

References (4)

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/2636

[Exploit] http://blogs.23.nu/prdelka/stories/13144/

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/29777

[Exploit, Patch] http://www.securityfocus.com/bid/20718

Scores

EPSS 0.0075

EPSS Percentile 73.2%

Details

Status published

Products (3)

hp/hp-ux 11.00

hp/hp-ux 11.4

hp/hp-ux 11.11

Published Oct 27, 2006

Tracked Since Feb 18, 2026