CVE-2000-0159

HP Ignite-UX does not save /etc/passwd when it creates an image of a trusted system, which can set the password field to a blank and allow an attacker to gain privileges.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2000-02-17

Last modified

2024-08-08

Affected products

• Hp-ux (Hp)

References

• http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=20000217160216.13708.qmail%40underground…