CVE - CVE-2003-1358

CVE-ID
CVE-2003-1358	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
rs.F300 for HP-UX 10.0 through 11.22 uses the PATH environment variable to find and execute programs such as rm while operating at raised privileges, which allows local users to gain privileges by modifying the path to point to a malicious rm program.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:6837 URL:http://www.securityfocus.com/bid/6837 BUGTRAQ:20030710 [LSD] HP-UX security vulnerabilities URL:http://www.securityfocus.com/archive/1/324381 HP:HPSBUX0302-240 URL:http://www.securityfocus.com/advisories/4960 SREASON:3236 URL:http://securityreason.com/securityalert/3236 XF:hp-rsf3000-daemon-access(11312) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/11312
Assigning CNA
MITRE Corporation
Date Record Created
20071016	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20071016)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)