MitreCVE-2003-1097CVE-2003-1097
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
Confidence
Low
EPSS
Percentile
5.2%
Buffer overflow in rexec on HP-UX B.10.20, B.11.00, and B.11.04, when setuid root, may allow local users to gain privileges via a long -l option.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| hp | hp-ux | 10.10 | cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:* |
| hp | hp-ux | 10.16 | cpe:2.3:o:hp:hp-ux:10.16:*:*:*:*:*:*:* |
| hp | hp-ux | 10.20 | cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:* |
| hp | hp-ux | 10.24 | cpe:2.3:o:hp:hp-ux:10.24:*:*:*:*:*:*:* |
| hp | hp-ux | 10.26 | cpe:2.3:o:hp:hp-ux:10.26:*:*:*:*:*:*:* |
| hp | hp-ux | 10.30 | cpe:2.3:o:hp:hp-ux:10.30:*:*:*:*:*:*:* |
| hp | hp-ux | 10.34 | cpe:2.3:o:hp:hp-ux:10.34:*:*:*:*:*:*:* |
| hp | hp-ux | 11.00 | cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:* |
| hp | hp-ux | 11.04 | cpe:2.3:o:hp:hp-ux:11.04:*:*:*:*:*:*:* |
| hp | hp-ux | 11.11 | cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:* |
References
archives.neohapsis.com/archives/bugtraq/2003-04/0374.html
www.ciac.org/ciac/bulletins/n-088.shtml
www.kb.cert.org/vuls/id/322540
www.kb.cert.org/vuls/id/CRDY-5MJKM4
www.securityfocus.com/bid/7459
exchange.xforce.ibmcloud.com/vulnerabilities/11890
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5611
Related
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
Confidence
Low
EPSS
Percentile
5.2%