Lucene search

MitreCVE-2004-0965

HistoryFeb 09, 2005 - 5:00 a.m.

CVE-2004-0965

2005-02-0905:00:00

mitre

web.nvd.nist.gov

hp-ux

stmkfont

arbitrary code execution

cve-2004-0965

nvd

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

Confidence

Low

EPSS

0.001

Percentile

25.6%

JSON

stmkfont in HP-UX B.11.00 through B.11.23 relies on the user-specified PATH when executing certain commands, which allows local users to execute arbitrary code by modifying the PATH environment variable to point to malicious programs.

Affected configurations

Nvd

Node

hphp-uxMatch11.00

hphp-uxMatch11.11

hphp-uxMatch11.22

hphp-uxMatch11.23ia64_64-bit

VendorProductVersionCPE
hphp-ux11.00cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*
hphp-ux11.11cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*
hphp-ux11.22cpe:2.3:o:hp:hp-ux:11.22:*:*:*:*:*:*:*
hphp-ux11.23cpe:2.3:o:hp:hp-ux:11.23:*:ia64_64-bit:*:*:*:*:*

Vendor	Product	Version	CPE
hp	hp-ux	11.00	cpe:2.3:o:hp:hp-ux:11.00:::::::*
hp	hp-ux	11.11	cpe:2.3:o:hp:hp-ux:11.11:::::::*
hp	hp-ux	11.22	cpe:2.3:o:hp:hp-ux:11.22:::::::*
hp	hp-ux	11.23	cpe:2.3:o:hp:hp-ux:11.23::ia64_64-bit:::::

References

marc.info/?l=bugtraq&m=109837243713696&w=2

www.nsfocus.com/english/homepage/research/0402.htm

www.securityfocus.com/advisories/7351

www.securityfocus.com/bid/11493

exchange.xforce.ibmcloud.com/vulnerabilities/17813

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5538

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

Confidence

Low

EPSS

0.001

Percentile

25.6%

JSON

Related for CVE-2004-0965