7.2

CVE-2004-0965

stmkfont in HP-UX B.11.00 through B.11.23 relies on the user-specified PATH when executing certain commands, which allows local users to execute arbitrary code by modifying the PATH environment variable to point to malicious programs.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hp ≫ Hp-ux Version11.00
Hp ≫ Hp-ux Version11.11
Hp ≫ Hp-ux Version11.22
Hp ≫ Hp-ux Version11.23 Editionia64_64-bit
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.66% 0.466
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://marc.info/?l=bugtraq&m=109837243713696&w=2
http://www.nsfocus.com/english/homepage/research/0402.htm
http://www.securityfocus.com/advisories/7351
http://www.securityfocus.com/bid/11493
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17813
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5538