CVE-2006-1509

Severity: medium (CVSS 4.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-03-30 · updated 2026-06-16

Description

/sbin/passwd in HP-UX B.11.00, B.11.11, and B.11.23 before 20060326 "does not recover gracefully from some error conditions," which allows local users to cause a denial of service.

Affected products

Hewlett Packard Enterprise (HPE) HP-UX: 11.00, 11.11, 11.23

References

http://secunia.com/advisories/19490
http://www.securityfocus.com/bid/17280
http://www.vupen.com/english/advisories/2006/1208
http://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00619550
https://exchange.xforce.ibmcloud.com/vulnerabilities/25596
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1412
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1660
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1690
http://secunia.com/advisories/19490
http://www.securityfocus.com/bid/17280
http://www.vupen.com/english/advisories/2006/1208
http://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00619550

Get alerted when CVE-2006-1509 or the next vulnerability affects your stack