Lucene search
HistoryOct 17, 2007 - 1:00 a.m.
CVE-2003-1358
cve-2003-1358
rs.f300
hp-ux
privilege escalation
nvd
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
7.2 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
0.4%
rs.F300 for HP-UX 10.0 through 11.22 uses the PATH environment variable to find and execute programs such as rm while operating at raised privileges, which allows local users to gain privileges by modifying the path to point to a malicious rm program.
Affected configurations
Node
hphp-uxMatch10.00
ORhphp-uxMatch10.01
ORhphp-uxMatch10.08
ORhphp-uxMatch10.09
ORhphp-uxMatch10.10
ORhphp-uxMatch10.16
ORhphp-uxMatch10.20
ORhphp-uxMatch10.24
ORhphp-uxMatch10.26
ORhphp-uxMatch10.30
ORhphp-uxMatch10.34
ORhphp-uxMatch11.00
ORhphp-uxMatch11.0.4
ORhphp-uxMatch11.04
ORhphp-uxMatch11.11
ORhphp-uxMatch11.20
ORhphp-uxMatch11.22
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
7.2 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
0.4%
Related for CVE-2003-1358