CVE:CVE-2011-4834
CNNVD:CNNVD-201112-269
基于AIX, HP-UX和Solaris的HP Application Lifestyle Management (ALM) 11版本的配置工具中的GetInstalledPackages函数中存在漏洞。本地用户可借助(1)/tmp/tmp.txt FIFO的特洛伊木马或者(2)/tmp/tmp.txt的符号链接攻击获得特权。
solution:Upgrade hp application_lifestyle_management to a higher version than 11,and avoid the version 11