Lucene search

[email protected]CVE-2003-0089

HistoryDec 15, 2003 - 5:00 a.m.

CVE-2003-0089

2003-12-1505:00:00

[email protected]

web.nvd.nist.gov

cve-2003-0089

buffer overflow

hp-ux

software distributor

code execution

lang environment variable

nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

JSON

Buffer overflow in the Software Distributor utilities for HP-UX B.11.00 and B.11.11 allows local users to execute arbitrary code via a long LANG environment variable to setuid programs such as (1) swinstall and (2) swmodify.

Affected configurations

NVD

Node

hphp-uxMatch11.00

hphp-uxMatch11.11

CPENameOperatorVersion
hp:hp-uxhp hp-uxeq11.00
hp:hp-uxhp hp-uxeq11.11

CPE	Name	Operator	Version
hp:hp-ux	hp hp-ux	eq	11.00
hp:hp-ux	hp hp-ux	eq	11.11

References

archives.neohapsis.com/archives/vulnwatch/2003-q4/0038.html

marc.info/?l=bugtraq&m=106873965001431&w=2

www.securityfocus.com/advisories/6030

www.securityfocus.com/bid/8986

exchange.xforce.ibmcloud.com/vulnerabilities/13623

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5466

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

JSON

Related for CVE-2003-0089

securityvulns1 nvd1 cvelist1