CVE-2000-0077: High severity HPE HP-UX vulnerability
The October 1998 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the ps and grep commands.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Ensure the aserver process is started with a sanitized PATH that contains only trusted system directories and does not include user-writable locations so an alternate PATH cannot cause execution of malicious ps/grep binaries.
HP-UX aserver PATH = restricted to trusted system directories (exclude user-writable directories) - Configuration
Modify aserver (or its wrapper) so it invokes ps and grep by absolute pathname (for example, /bin/ps and /bin/grep) rather than relying on the PATH environment variable.
HP-UX aserver ps/grep invocation = use absolute paths - Compensating control
Restrict who can execute the aserver binary by tightening file permissions and access controls so local unprivileged users cannot run it until a proper fix is applied.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0077?
CVE-2000-0077 is classified as a high severity vulnerability due to its potential for privilege escalation.
How do I fix CVE-2000-0077?
To fix CVE-2000-0077, ensure that the PATH for the aserver program does not include malicious directories.
Who is affected by CVE-2000-0077?
CVE-2000-0077 affects local users on HP-UX versions 10 and 11.
What type of vulnerability is CVE-2000-0077?
CVE-2000-0077 is a privilege escalation vulnerability that allows local users to gain unauthorized access.
When was CVE-2000-0077 disclosed?
CVE-2000-0077 was disclosed in January 2000.