medium5.5Public exploit code
CVE-2000-0972
HP-UX 11.00 crontab allows local users to read arbitrary files via the -e option by creating a symlink to the target file during the crontab session, quitting …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- HP-UX 10.20/11.0 - crontab '/tmp' File2000-10-20 · local · hp-ux · Verified
- HP-UX 11.00/10.20 crontab - Overwrite Files2000-11-19 · dos · hp-ux · Verified
Impact
HP-UX 11.00 crontab allows local users to read arbitrary files via the -e option by creating a symlink to the target file during the crontab session, quitting the session, and reading the error messages that crontab generates.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hp | Hp-Ux | Version 11.00 |