CVE-2011-4834

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2011-12-15 · updated 2026-06-16
Weakness: CWE-264

Description

The GetInstalledPackages function in the configuration tool in HP Application Lifestyle Management (ALM) 11 on AIX, HP-UX, and Solaris allows local users to gain privileges via (1) a Trojan horse /tmp/tmp.txt FIFO or (2) a symlink attack on /tmp/tmp.txt.

Affected products

HP Application Lifestyle Management: 11

References

http://0a29.blogspot.com/2011/12/0a29-11-2-privilege-escalation.html
http://secunia.com/advisories/47040
http://www.securityfocus.com/archive/1/520783/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/71698
http://0a29.blogspot.com/2011/12/0a29-11-2-privilege-escalation.html
http://secunia.com/advisories/47040
http://www.securityfocus.com/archive/1/520783/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/71698

Get alerted when CVE-2011-4834 or the next vulnerability affects your stack