CVE-2005-3277: HP HP-Ux

High severity, CVSS 10.0. EPSS: 21.7% chance of exploitation in the next 30 days.

The LPD service in HP-UX 10.20 11.11 (11i) and earlier allows remote attackers to execute arbitrary code via shell metacharacters ("`" or single backquote) in a request that is not properly handled when an error occurs, as demonstrated by killing the connection, a different vulnerability than CVE-2002-1473.

Affected products

• HP HP-Ux: version 10.20 only; version 11.00 only; version 11.11 only

Published 2005-10-21. Last modified 2026-06-16.