CVE-2000-0077

The CVE-2000-0077 entry concerns the October 1998 HP-UX aserver program. It describes a local-privilege escalation where an alternate PATH is used to locate ps and grep, enabling a local attacker to gain privileges. Root cause: insecure PATH handling in the aserver’s command lookup. Impact per th...

CVE-2000-0077

The October 1998 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the ps and grep commands...