Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.2

HP-UX Software Distributor may let local users gain extra privileges

CVE-2006-2574 · published 20 years ago
Summary

HP-UX's Software Distributor component can be tricked by someone who already has access to the machine to increase their permission level. This could let a regular user perform actions reserved for administrators, potentially exposing sensitive data or changing system settings. Apply the latest HP-UX patches and limit local user accounts to only those that truly need access.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
hp hp-ux 11.00
11.4
11.11
11.23
cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*
Original advisory text
Multiple unspecified vulnerabilities in Software Distributor in HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allow local users to gain privileges via unspecified attack vectors.
Multiple unspecified vulnerabilities in Software Distributor in HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allow local users to gain privileges via unspecified attack vectors.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
7.2 High
Exploitation
<1% chance of attack within 30 days
Timeline
Published24 May 2006
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2006-2574 · NVD
Track software like this
Free during beta