CVE-2006-5556

Buffer overflow in the localtime_r function, and certain other functions, in libc in HP-UX B.11.11 and possibly other versions allows local users to execute arbitrary code via a long TZ environment variable.

Affected products

Hp-Ux, Libc

Hp Hp-ux

= 11.00, 11.4, 11.11

Fix

Available

CVSS 2.0

4.6 MEDIUM

EPSS

1.3% (68th percentile)

NVD status

Modified

Published

2006-10-27