CVE-2011-4834
HP Application Lifestyle Management 11 - Privilege Escalation via /tmp/tmp.txt Symlink Attack
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2011-4834. PoCs published by anonymous.
AI-analyzed exploit summary This exploit leverages a local privilege escalation vulnerability in HP Application Lifestyle Management by injecting a command into a configuration file, which is then executed as root when a vulnerable function is called. The PoC uses a named pipe to block and inject the malicious payload.
Description
The GetInstalledPackages function in the configuration tool in HP Application Lifestyle Management (ALM) 11 on AIX, HP-UX, and Solaris allows local users to gain privileges via (1) a Trojan horse /tmp/tmp.txt FIFO or (2) a symlink attack on /tmp/tmp.txt.
Exploits (1)
This exploit leverages a local privilege escalation vulnerability in HP Application Lifestyle Management by injecting a command into a configuration file, which is then executed as root when a vulnerable function is called. The PoC uses a named pipe to block and inject the malicious payload.