Back to search
CVE-2003-1358
Published: Oct 17, 2007
Modified: Aug 8, 2024
PUBLISHED
Description
rs.F300 for HP-UX 10.0 through 11.22 uses the PATH environment variable to find and execute programs such as rm while operating at raised privileges, which allows local users to gain privileges by modifying the path to point to a malicious rm program.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
HPSBUX0302-240
vendor-advisory
x_refsource_HP
20030710 [LSD] HP-UX security vulnerabilities
mailing-list
x_refsource_BUGTRAQ
3236
third-party-advisory
x_refsource_SREASON
6837
vdb-entry
x_refsource_BID
hp-rsf3000-daemon-access(11312)
vdb-entry
x_refsource_XF
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now