critical impact:

Miscellaneous security-related APIs - not supported (CrUn57)

Problem description

The identified Application Programming Interfaces (APIs) exist on Tru64 UNIX and may or may not exist on HP-UX. Any that do exist are unsupported and undocumented, and their use may result in unexpected behavior.

• syscall - provides the functionality of an indirect system call.

• expacct - expands accounting record.

• setpwfile - sets the new default password file to be user-specified filename instead of /etc/passwd.

• crypt16 subroutine - is identical to the crypt function except that it will accept a password up to sixteen characters in length. It generates a longer encrypted password for use with enhanced security features.

• uadmin - provides administrative control.

• swapctl - manages the system swap space.

• setlogin - sets the login name of the user associated with the current session.

• getsysinfo - gets system information.

• setsysinfo - sets system information.

• pid_block, pid_unblock - stops (blocks) or resumes (unblocks) the specified process.

• fuser - reports PIDS and UIDs for files, file systems and/or devices attached to them.

Note: swapctl API has been supported starting from HPUX 11iv3.

Identifiers

crypt16	getsysinfo	setlogin	swapctl
expacct	pid_block	setpwfile	syscall
fuser	pid_unblock	setsysinfo	uadmin

See also

• Background information on security related issues impacts
• fuser(2)
• getsysinfo(2)
• pid_block(2)
• pid_unblock(2)
• setlogin(2)
• setsysinfo(2)
• swapctl(2)
• syscall(2)
• uadmin(2)
• crypt16(3)
• expacct(3)
• setpwfile(3)

Solution description

Review your code and the applicable manpages to determine how to resolve this issue.

Problem summary