Unscored severity · published Dec 31, 2003
CVE-2003-1358
rs.F300 for HP-UX 10.0 through 11.22 uses the PATH environment variable to find and execute programs such as rm while operating at raised privileges, which allows local users to…
–
CVSS
1%
EPSS
No
On KEV
Description
rs.F300 for HP-UX 10.0 through 11.22 uses the PATH environment variable to find and execute programs such as rm while operating at raised privileges, which allows local users to gain privileges by modifying the path to point to a malicious rm program.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 61% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HP
Hp-ux · HP
10.00; 10.01; 10.08; 10.09; 10.10; 10.16; +11 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-1358
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-1358
securityreason.com
http://securityreason.com/securityalert/3236
www.securityfocus.com
http://www.securityfocus.com/advisories/4960
www.securityfocus.com
http://www.securityfocus.com/archive/1/324381
Exploit
http://www.securityfocus.com/bid/6837
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/11312
More from Hp-ux
9.8
CVE-2012-1823
PHP-CGI Query String Parameter Vulnerability
7.5
CVE-2015-5477
ISC BIND Data Processing Errors Vulnerability
9.8
CVE-2001-0249
Heap overflow in FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the LIST command, which uses glob to…
9.8
CVE-2001-0248
Buffer overflow in FTP server in HPUX 11 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the STAT command, which uses glob to…
9.3
CVE-2024-42500
HPE has identified a denial of service vulnerability in HPE HP-UX System's Network File System (NFSv4) services