Lucene search
HistoryFeb 09, 2005 - 5:00 a.m.
CVE-2004-0965
hp-ux
stmkfont
arbitrary code execution
cve-2004-0965
nvd
7 High
AI Score
Confidence
Low
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
24.4%
stmkfont in HP-UX B.11.00 through B.11.23 relies on the user-specified PATH when executing certain commands, which allows local users to execute arbitrary code by modifying the PATH environment variable to point to malicious programs.
References
Related
openvas
openvas
HP-UX Update for HP-UX Pkg HPSBUX01088
2009-05-05 00:00:00
HP-UX Update for xfs and stmkfont HPSBUX01061
2009-05-05 00:00:00
nessus
nessus
securityvulns
securityvulns
NSFOCUS SA2004-02 : HP-UX stmkfont Local Privilege Escalation Vulnerability
2004-10-23 00:00:00
7 High
AI Score
Confidence
Low
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
24.4%
Related for CVE-2004-0965