low3.6Public exploit code
CVE-2000-1127
registrar in the HP resource monitor service allows local users to read and modify arbitrary files by renaming the original registrar.log log file and creating…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- HP-UX 10.20 - registrar Local Arbitrary File Read2000-11-08 · local · hp-ux · Verified
Impact
registrar in the HP resource monitor service allows local users to read and modify arbitrary files by renaming the original registrar.log log file and creating a symbolic link to the target file, to which registrar appends log information and sets the permissions to be world readable.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hp | Hp-Ux | Version 10.20 |