EUVD-2000-0077

Malware in sbrugna...

CVE-2000-0078

The CVE-2000-0078 entry concerns the HP-UX aserver program (June 1999 version) where a local user can gain privileges by altering the PATH used by aserver to locate the awk command. Affected component: aserver; root cause is path handling allowing hijacking of the awk executable lookup. Impact, a...

CVE-2000-0077: Undefined Security Weakness

The October 1998 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the ps and grep commands...

CVE-2000-0078: Undefined Security Weakness

The June 1999 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the awk command...

CVE-2000-0005: Undefined Security Weakness

HP-UX aserver program allows local users to gain privileges via a symlink attack...