CVEvulnerability
CVE-2003-1358
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2003-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
rs.F300 for HP-UX 10.0 through 11.22 uses the PATH environment variable to find and execute programs such as rm while operating at raised privileges, which allows local users to gain privileges by modifying the path to point to a malicious rm program.
Affected configurations
• hp hp-ux 10.00
• hp hp-ux 10.01
• hp hp-ux 10.08
• hp hp-ux 10.09
• hp hp-ux 10.10
• hp hp-ux 10.16
• hp hp-ux 10.20
• hp hp-ux 10.24
• hp hp-ux 10.26
• hp hp-ux 10.30
• hp hp-ux 10.34
• hp hp-ux 11.00
• hp hp-ux 11.0.4
• hp hp-ux 11.04
• hp hp-ux 11.11
• hp hp-ux 11.20
• hp hp-ux 11.22
Related
Weakness · not in database (1)
References
- http://securityreason.com/securityalert/3236 securityreason.com
- http://www.securityfocus.com/advisories/4960 www.securityfocus.com
- http://www.securityfocus.com/archive/1/324381 www.securityfocus.com
- http://www.securityfocus.com/bid/6837 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11312 exchange.xforce.ibmcloud.com
- http://securityreason.com/securityalert/3236 securityreason.com
- http://www.securityfocus.com/advisories/4960 www.securityfocus.com
- http://www.securityfocus.com/archive/1/324381 www.securityfocus.com
- http://www.securityfocus.com/bid/6837 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11312 exchange.xforce.ibmcloud.com