Lucene search
HistoryDec 31, 2003 - 5:00 a.m.
CVE-2003-1358
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.8
Confidence
High
EPSS
0
Percentile
0.4%
rs.F300 for HP-UX 10.0 through 11.22 uses the PATH environment variable to find and execute programs such as rm while operating at raised privileges, which allows local users to gain privileges by modifying the path to point to a malicious rm program.
Affected configurations
Node
hphp-uxMatch10.00
ORhphp-uxMatch10.01
ORhphp-uxMatch10.08
ORhphp-uxMatch10.09
ORhphp-uxMatch10.10
ORhphp-uxMatch10.16
ORhphp-uxMatch10.20
ORhphp-uxMatch10.24
ORhphp-uxMatch10.26
ORhphp-uxMatch10.30
ORhphp-uxMatch10.34
ORhphp-uxMatch11.00
ORhphp-uxMatch11.0.4
ORhphp-uxMatch11.04
ORhphp-uxMatch11.11
ORhphp-uxMatch11.20
ORhphp-uxMatch11.22
| Vendor | Product | Version | CPE |
|---|---|---|---|
| hp | hp-ux | 10.00 | cpe:2.3:o:hp:hp-ux:10.00:*:*:*:*:*:*:* |
| hp | hp-ux | 10.01 | cpe:2.3:o:hp:hp-ux:10.01:*:*:*:*:*:*:* |
| hp | hp-ux | 10.08 | cpe:2.3:o:hp:hp-ux:10.08:*:*:*:*:*:*:* |
| hp | hp-ux | 10.09 | cpe:2.3:o:hp:hp-ux:10.09:*:*:*:*:*:*:* |
| hp | hp-ux | 10.10 | cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:* |
| hp | hp-ux | 10.16 | cpe:2.3:o:hp:hp-ux:10.16:*:*:*:*:*:*:* |
| hp | hp-ux | 10.20 | cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:* |
| hp | hp-ux | 10.24 | cpe:2.3:o:hp:hp-ux:10.24:*:*:*:*:*:*:* |
| hp | hp-ux | 10.26 | cpe:2.3:o:hp:hp-ux:10.26:*:*:*:*:*:*:* |
| hp | hp-ux | 10.30 | cpe:2.3:o:hp:hp-ux:10.30:*:*:*:*:*:*:* |
Related
exploitdb
exploitdb
HP-UX 10.x - rs.F3000 Unauthorized Access
2003-02-12 00:00:00
cvelist
cvelist
CVE-2003-1358
2007-10-17 01:00:00
cve
cve
CVE-2003-1358
2007-10-17 01:00:00
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.8
Confidence
High
EPSS
0
Percentile
0.4%
Related for NVD:CVE-2003-1358