CVE-2010-4435

Related Files

HP Security Bulletin HPSBUX02628 SSRT090183

Posted Feb 19, 2011

Authored by HP | Site hp.com

HP Security Bulletin HPSBUX02628 SSRT090183 - A potential security vulnerability has been identified with HP-UX running CDE Calendar Manager. The vulnerability could be exploited remotely to execute arbitrary code. Revision 1 of this advisory.

tags | advisory, arbitrary

systems | hpux

advisories | CVE-2010-4435

SHA-256 | e23524d75371622d94a1139c07279983bcab41ccf37c863bcb305725889a81f5

Download | Favorite | View

rpc.cmsd Remote Proof Of Concept Exploit

Posted Feb 8, 2011

Authored by Rodrigo Rubira Branco

rpc.cmsd / Calendar Manager RPC service remote proof of concept buffer overflow exploit for Solaris, AIX, and HP-UX.

tags | exploit, remote, overflow, proof of concept

systems | solaris, aix, hpux

advisories | CVE-2010-4435

SHA-256 | 5b93d417eda40ad6a76cd6bd81c57c1a00b7622bb6aa9d80ff8bb2625d7e3c02

Download | Favorite | View

Zero Day Initiative Advisory 11-062

Posted Feb 8, 2011

Authored by Tipping Point | Site zerodayinitiative.com

Zero Day Initiative Advisory 11-062 - This vulnerability allows attackers to execute arbitrary code on vulnerable installations of the Calendar Manager RPC Service. Authentication is not required to exploit this vulnerability. The specific flaw exists within the CMSD server (rpc.cmsd) which listens by default on UDP port 32768. The process does not properly handle large XDR-encoded ASCII strings to RPC call 10 followed by RPC call 6. This can be abused by an attacker to overflow a buffer on the remote host. Successful exploitation can result in arbitrary code execution.

tags | advisory, remote, overflow, arbitrary, udp, code execution

advisories | CVE-2010-4435

SHA-256 | e333491f06c3f009392877345815035c65e8bdd0ce06fa7f31c26f9dcea3dba7

Download | Favorite | View