First published: Tue Dec 31 2002(Updated: )
VJE.VJE-RUN in HP-UX 11.00 adds bin to /etc/PATH, which could allow local users to gain privileges.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
HPE HP-UX | =11.00 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2002-2363 is considered a high-severity vulnerability due to the potential privilege escalation it allows for local users.
To fix CVE-2002-2363, remove the insecure paths added to /etc/PATH and ensure proper permissions are set for the affected binaries.
CVE-2002-2363 affects local users on HP-UX version 11.00 due to the improper configuration of the PATH environment variable.
CVE-2002-2363 specifically affects systems running HP-UX 11.00.
CVE-2002-2363 cannot be exploited remotely as it requires local user access to the affected system.