CVE-2004-0965

stmkfont in HP-UX B.11.00 through B.11.23 relies on the user-specified PATH when executing certain commands, which allows local users to execute arbitrary code by modifying the PATH environment variable to point to malicious programs.

Score

CVSS 2.0 7.2 High

Status

Modified - cve@mitre.org

Published

2005-02-09

Last modified

2024-08-08

Affected products

• Hp-ux (Hp)

References

• http://marc.info/?l=bugtraq&m=109837243713696&w=2
• http://www.nsfocus.com/english/homepage/research/0402.htm
• http://www.securityfocus.com/advisories/7351
• http://www.securityfocus.com/bid/11493
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17813
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5538