CVE-2006-5452

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-10-23 · updated 2026-06-16

Description

Buffer overflow in dtmail on HP Tru64 UNIX 4.0F through 5.1B and HP-UX B.11.00 through B.11.23 allows local users to execute arbitrary code via a long -a (aka attachment) argument.

Affected products

Hewlett Packard Enterprise (HPE) HP-UX: 11.00, 11.4, 11.11, 11.22, 11.23
HP Tru64: 4.0f, 4.0f-pk8, 4.0g, 4.0g-pk4, 5.0a, 5.1 (+6)

References

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00793091
http://secunia.com/advisories/22451
http://secunia.com/advisories/22528
http://securitytracker.com/id?1017083
http://securitytracker.com/id?1017098
http://securitytracker.com/id?1017099
http://www.netragard.com/pdfs/research/HP-TRU64-DTMAIL-20060810.txt
http://www.securityfocus.com/archive/1/449321/100/0/threaded
http://www.securityfocus.com/bid/20580
http://www.vupen.com/english/advisories/2006/4139
http://www.vupen.com/english/advisories/2006/4140
https://exchange.xforce.ibmcloud.com/vulnerabilities/29644

Get alerted when CVE-2006-5452 or the next vulnerability affects your stack