VULNERABILITY INTELLIGENCE

CVE-2011-4834

CVSS score4.6 MEDIUM
EPSS probability1.16%
CISA KEVNot currently listed
Published2011-12-15
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:P/A:P

Description

The GetInstalledPackages function in the configuration tool in HP Application Lifestyle Management (ALM) 11 on AIX, HP-UX, and Solaris allows local users to gain privileges via (1) a Trojan horse /tmp/tmp.txt FIFO or (2) a symlink attack on /tmp/tmp.txt.

Primary references