CVE-2006-5556: HP HP-Ux

Medium severity, CVSS 4.6. EPSS: 1.3% chance of exploitation in the next 30 days.

Buffer overflow in the localtime_r function, and certain other functions, in libc in HP-UX B.11.11 and possibly other versions allows local users to execute arbitrary code via a long TZ environment variable.

Affected products

• HP HP-Ux: version 11.00 only; version 11.4 only; version 11.11 only

Published 2006-10-27. Last modified 2026-06-16.