CVEs-PoC/2011/CVE-2011-4834.md

CVE-2011-4834

Description

The GetInstalledPackages function in the configuration tool in HP Application Lifestyle Management (ALM) 11 on AIX, HP-UX, and Solaris allows local users to gain privileges via (1) a Trojan horse /tmp/tmp.txt FIFO or (2) a symlink attack on /tmp/tmp.txt.

POC

Reference

• http://0a29.blogspot.com/2011/12/0a29-11-2-privilege-escalation.html
• http://0a29.blogspot.com/2011/12/0a29-11-2-privilege-escalation.html

Github

• https://github.com/lucassbeiler/linux_hardening_arsenal