CVE-2004-0965 — HP Hp-ux vulnerability

3 documents3 sources
Severity
7.2HIGHNVD
EPSS
0.1%
top 81.59%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
HP Hp-ux
Timeline
PublishedFeb 9
Latest updateApr 29

Description

stmkfont in HP-UX B.11.00 through B.11.23 relies on the user-specified PATH when executing certain commands, which allows local users to execute arbitrary code by modifying the PATH environment variable to point to malicious programs.

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages1 packages

▶NVDhp/hp-ux4 versions+3

Patches

Patch: www.securityfocus.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-mqh4-wrhc-385q: stmkfont in HP-UX B↗2022-04-29
▶
CVEList
CVE-2004-0965: stmkfont in HP-UX B↗2004-10-26
▶
CVE-2004-0965 — HP Hp-ux vulnerability | cvebase