CVE-2006-5558

HP-UX B.11.11 - Format String

Title source: llm

Description

Format string vulnerability in the swask command in HP-UX B.11.11 and possibly other versions allows local users to execute arbitrary code via format string specifiers in the -s argument. NOTE: this might be a duplicate of CVE-2006-2574, but the details relating to CVE-2006-2574 are too vague to be certain.

Exploits (1)

exploitdb WORKING POC VERIFIED

by prdelka · clocalhp-ux

https://www.exploit-db.com/exploits/2635

View Code ZIP pw:eip

References (4)

[Exploit] http://blogs.23.nu/prdelka/stories/13144/

[Exploit, Patch] http://www.securityfocus.com/bid/20726

[Third Party Advisory, VDB Entry] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5804

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/2635

Scores

EPSS 0.0341

EPSS Percentile 87.5%

Details

Status published

Products (4)

hp/hp-ux 11.00

hp/hp-ux 11.4

hp/hp-ux 11.11

hp/hp-ux 11.23

Published Oct 27, 2006

Tracked Since Feb 18, 2026