CVE-2003-1358
First published: Wed Dec 31 2003(Updated: )
rs.F300 for HP-UX 10.0 through 11.22 uses the PATH environment variable to find and execute programs such as rm while operating at raised privileges, which allows local users to gain privileges by modifying the path to point to a malicious rm program.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| HPE HP-UX | =10.30 | |
| HPE HP-UX | =11.11 | |
| HPE HP-UX | =10.01 | |
| HPE HP-UX | =10.00 | |
| HPE HP-UX | =10.26 | |
| HPE HP-UX | =11.04 | |
| HPE HP-UX | =10.34 | |
| HPE HP-UX | =11.00 | |
| HPE HP-UX | =11.0.4 | |
| HPE HP-UX | =10.16 | |
| HPE HP-UX | =10.20 | |
| HPE HP-UX | =10.09 | |
| HPE HP-UX | =10.10 | |
| HPE HP-UX | =10.24 | |
| HPE HP-UX | =11.20 | |
| HPE HP-UX | =11.22 | |
| HPE HP-UX | =10.08 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2003-1358?
CVE-2003-1358 is considered to have high severity due to its potential to allow local users to gain elevated privileges.
How do I fix CVE-2003-1358?
To fix CVE-2003-1358, ensure that the PATH environment variable does not include directories writable by unprivileged users.
Which versions of HP-UX are affected by CVE-2003-1358?
CVE-2003-1358 affects HP-UX versions 10.00 through 11.22.
Can CVE-2003-1358 be exploited remotely?
CVE-2003-1358 is a local privilege escalation vulnerability and cannot be exploited remotely.
What types of programs are at risk with CVE-2003-1358?
The programs at risk with CVE-2003-1358 include commonly used commands like rm that may be executed with raised privileges.
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/author
- agent/references
- agent/last-modified-date
- agent/severity
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/hp
- canonical/hpe hp-ux
- version/hpe hp-ux/10.30
- version/hpe hp-ux/11.11
- version/hpe hp-ux/10.01
- version/hpe hp-ux/10.00
- version/hpe hp-ux/10.26
- version/hpe hp-ux/11.04
- version/hpe hp-ux/10.34
- version/hpe hp-ux/11.00
- version/hpe hp-ux/11.0.4
- version/hpe hp-ux/10.16
- version/hpe hp-ux/10.20
- version/hpe hp-ux/10.09
- version/hpe hp-ux/10.10
- version/hpe hp-ux/10.24
- version/hpe hp-ux/11.20
- version/hpe hp-ux/11.22
- version/hpe hp-ux/10.08