CVE-2003-1358

Опубликовано: 31 дек. 2003

Источник: nvd

CVSS2: 7.2

EPSS Низкий

Описание

rs.F300 for HP-UX 10.0 through 11.22 uses the PATH environment variable to find and execute programs such as rm while operating at raised privileges, which allows local users to gain privileges by modifying the path to point to a malicious rm program.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:hp:hp-ux:10.00:*:*:*:*:*:*:*

cpe:2.3:o:hp:hp-ux:10.01:*:*:*:*:*:*:*

cpe:2.3:o:hp:hp-ux:10.08:*:*:*:*:*:*:*

cpe:2.3:o:hp:hp-ux:10.09:*:*:*:*:*:*:*

cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:*

cpe:2.3:o:hp:hp-ux:10.16:*:*:*:*:*:*:*

cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*

cpe:2.3:o:hp:hp-ux:10.24:*:*:*:*:*:*:*

cpe:2.3:o:hp:hp-ux:10.26:*:*:*:*:*:*:*

cpe:2.3:o:hp:hp-ux:10.30:*:*:*:*:*:*:*

cpe:2.3:o:hp:hp-ux:10.34:*:*:*:*:*:*:*

cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*

cpe:2.3:o:hp:hp-ux:11.0.4:*:*:*:*:*:*:*

cpe:2.3:o:hp:hp-ux:11.04:*:*:*:*:*:*:*

cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*

cpe:2.3:o:hp:hp-ux:11.20:*:*:*:*:*:*:*

cpe:2.3:o:hp:hp-ux:11.22:*:*:*:*:*:*:*

EPSS

Процентиль: 74%

0.00806

Низкий

7.2 High

CVSS2

Дефекты

CWE-264

Связанные уязвимости

GHSA-fr78-grw8-43p6

github

почти 4 года назад