CVE-2003-1358: High severity HPE HP-UX vulnerability
rs.F300 for HP-UX 10.0 through 11.22 uses the PATH environment variable to find and execute programs such as rm while operating at raised privileges, which allows local users to gain privileges by modifying the path to point to a malicious rm program.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2003-1358?
CVE-2003-1358 is considered to have high severity due to its potential to allow local users to gain elevated privileges.
How do I fix CVE-2003-1358?
To fix CVE-2003-1358, ensure that the PATH environment variable does not include directories writable by unprivileged users.
Which versions of HP-UX are affected by CVE-2003-1358?
CVE-2003-1358 affects HP-UX versions 10.00 through 11.22.
Can CVE-2003-1358 be exploited remotely?
CVE-2003-1358 is a local privilege escalation vulnerability and cannot be exploited remotely.
What types of programs are at risk with CVE-2003-1358?
The programs at risk with CVE-2003-1358 include commonly used commands like rm that may be executed with raised privileges.