CVE-2000-0077

The CVE-2000-0077 entry concerns the October 1998 HP-UX aserver program. It describes a local-privilege escalation where an alternate PATH is used to locate ps and grep, enabling a local attacker to gain privileges. Root cause: insecure PATH handling in the aserver’s command lookup. Impact per th...