NVD

Id
71367  
Name
CVE-2004-0965  
Description
stmkfont in HP-UX B.11.00 through B.11.23 relies on the user-specified PATH when executing certain commands, which allows local users to execute arbitrary code by modifying the PATH environment variable to point to malicious programs.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2005-02-09  
Modified Date
2017-07-10  
Seq
2004-0965  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
368921 71367 CVE-2004-0965 20041021 NSFOCUS SA2004-02 : HP-UX stmkfont Local Privilege Escalation Vulnerability  View
368922 71367 CVE-2004-0965 oval:org.mitre.oval:def:5538  View
368923 71367 CVE-2004-0965 http://www.nsfocus.com/english/homepage/research/0402.htm  View
368924 71367 CVE-2004-0965 SSRT4807  View
368925 71367 CVE-2004-0965 11493  View
368926 71367 CVE-2004-0965 hpux-stmkfont-gain-privileges(17813)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63115 JVNDB-2004-000457 HP-UX の stmkfont ユーティリティにおける権限昇格の脆弱性 HP-UX の stmkfont ユーティリティには、外部コマンドを呼び出す際の環境変数 PATH のチェックに不備が存在するため、特定の外部コマンドの呼び出しを許してしまう脆弱性が存在します。 CVE-2004-0965 9392 CVE-2004-0965 71367 7.2 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000457.html 2004-10-20 2007-04-01 View