Unscored severity · published Feb 9, 2005
CVE-2004-0965
stmkfont in HP-UX B.11.00 through B.11.23 relies on the user-specified PATH when executing certain commands, which allows local users to execute arbitrary code by modifying the…
–
CVSS
0.7%
EPSS
No
On KEV
Description
stmkfont in HP-UX B.11.00 through B.11.23 relies on the user-specified PATH when executing certain commands, which allows local users to execute arbitrary code by modifying the PATH environment variable to point to malicious programs.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 51% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HP
Hp-ux · HP
11.00; 11.11; 11.22; 11.23 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0965
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0965
marc.info
http://marc.info/?l=bugtraq&m=109837243713696&w=2
www.nsfocus.com
http://www.nsfocus.com/english/homepage/research/0402.htm
www.securityfocus.com
http://www.securityfocus.com/advisories/7351
Patch
http://www.securityfocus.com/bid/11493
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/17813
oval.cisecurity.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5538
More from Hp-ux
9.8
CVE-2012-1823
PHP-CGI Query String Parameter Vulnerability
7.5
CVE-2015-5477
ISC BIND Data Processing Errors Vulnerability
9.8
CVE-2001-0249
Heap overflow in FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the LIST command, which uses glob to…
9.8
CVE-2001-0248
Buffer overflow in FTP server in HPUX 11 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the STAT command, which uses glob to…
9.3
CVE-2024-42500
HPE has identified a denial of service vulnerability in HPE HP-UX System's Network File System (NFSv4) services