CVE-2007-2553

HP Tru64 UNIX <5.1B-4 - Privilege Escalation

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-2553. PoCs published by Daniele Calore.

AI-analyzed exploit summary This exploit leverages a local privilege escalation vulnerability in HP Tru64 UNIX by manipulating the environment size and exploiting the 'dop' binary to execute arbitrary code with superuser privileges. It creates a malicious 'dopAction' to spawn a root shell.

Description

Unspecified vulnerability in dop in HP Tru64 UNIX 5.1B-4, 5.1B-3, and 5.1A PK6 allows local users to gain privileges via a large amount of data in the environment, as demonstrated by a long environment variable.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Daniele Calore · bashlocalunix
https://www.exploit-db.com/exploits/30017

This exploit leverages a local privilege escalation vulnerability in HP Tru64 UNIX by manipulating the environment size and exploiting the 'dop' binary to execute arbitrary code with superuser privileges. It creates a malicious 'dopAction' to spawn a root shell.

Classification
Working Poc 95%
Attack Type
Lpe
Complexity
Moderate
Reliability
Reliable
Target: HP Tru64 UNIX 5.1, 5.1A, 5.1B
Auth required
Prerequisites: Local access to the system · The 'dop' binary must have the set-user ID bit set · exec_disable_arg_limit must be set to 0
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (9)

Core 9
Core References
Exploit, Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/23881
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/25197
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/1715
Various Sources vendor-advisory x_refsource_hp
https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c01036871
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/468103/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/34175
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1018021
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/36203

Scores

EPSS 0.0094
EPSS Percentile 56.1%

Details

Status published
Products (3)
hp/tru64 5.1a pk6
hp/tru64 5.1b3
hp/tru64 5.1b4
Published May 09, 2007
Tracked Since Feb 18, 2026