CVE-2004-0965 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2004-0965
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2004-0965

Description: stmkfont in HP-UX B.11.00 through B.11.23 relies on the user-specified PATH when executing certain commands, which allows local users to execute arbitrary code by modifying the PATH environment variable to point to malicious programs.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/17813 OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5538 MISC http://www.nsfocus.com/english/homepage/research/0402.htm HP http://www.securityfocus.com/advisories/7351 BUGTRAQ http://marc.theaimsgroup.com/?l=bugtraq&m=109837243713696&w=2 BID 11493

Return to the previous page.