Unscored severity · published Jan 2, 2000
CVE-2000-0077
The October 1998 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the ps and grep commands
–
CVSS
1%
EPSS
No
On KEV
Description
The October 1998 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the ps and grep commands.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 62% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HP
Hp-ux · HP
10; 11 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2000-0077
CVE.org
https://www.cve.org/CVERecord?id=CVE-2000-0077
oval.cisecurity.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5549
More from Hp-ux
9.8
CVE-2012-1823
PHP-CGI Query String Parameter Vulnerability
7.5
CVE-2015-5477
ISC BIND Data Processing Errors Vulnerability
9.8
CVE-2001-0249
Heap overflow in FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the LIST command, which uses glob to…
9.8
CVE-2001-0248
Buffer overflow in FTP server in HPUX 11 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the STAT command, which uses glob to…
9.3
CVE-2024-42500
HPE has identified a denial of service vulnerability in HPE HP-UX System's Network File System (NFSv4) services