NetSight
IP …
high7.2Public exploit code

CVE-2003-1358

rs.F300 for HP-UX 10.0 through 11.22 uses the PATH environment variable to find and execute programs such as rm while operating at raised privileges, which all…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

rs.F300 for HP-UX 10.0 through 11.22 uses the PATH environment variable to find and execute programs such as rm while operating at raised privileges, which allows local users to gain privileges by modifying the path to point to a malicious rm program.

Affected products

VendorProductAffected versions
HpHp-Ux
Versions 10.00, 10.01, 10.08, 10.09, 10.10, 10.16

Weakness classification

CWE-264

References