VULNERABILITY INTELLIGENCE

CVE-2006-5557

CVSS score4.6 MEDIUM
EPSS probability1.41%
CISA KEVNot currently listed
Published2006-10-27
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:P/A:P

Description

Stack-based buffer overflow in the (1) swpackage and (2) swmodify commands in HP-UX B.11.11 and possibly other versions allows local users to execute arbitrary code via a long -S argument. NOTE: this might be a duplicate of CVE-2006-2574, but the details relating to CVE-2006-2574 are too vague to be certain.

Primary references