Vulnerabilities > CVE-2000-0077 - Unspecified vulnerability in HP Hp-Ux 10/11

047910
CVSS 7.2 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
local
low complexity
hp
exploit available
NVD
Published: 2000-01-02
Updated: 2018-05-03

Summary

The October 1998 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the ps and grep commands.

Vulnerable Configurations

Part Description Count
OS
Hp
2

Exploit-Db

descriptionHP-UX 10.x/11.x Aserver PATH Vulnerability. CVE-2000-0077. Local exploit for hp-ux platform
idEDB-ID:20396
last seen2016-02-02
modified1998-10-18
published1998-10-18
reporterLoneguard
sourcehttps://www.exploit-db.com/download/20396/
titleHP-UX 10.x/11.x Aserver PATH Vulnerability

Oval

accepted2008-08-25T04:00:16.902-04:00
classvulnerability
contributors
nameMichael Wood
organizationHewlett-Packard
descriptionThe October 1998 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the ps and grep commands.
familyunix
idoval:org.mitre.oval:def:5549
statusaccepted
submitted2008-07-11T14:41:52.000-04:00
title/opt/audio/bin/Aserver can be used to gain root access.
version35

References