Buffer overflow in cu program in HP-UX 11.0 may allow local users to gain privileges via a long -l command line argument.

Exploit prediction (EPSS)

1.48% probability of exploitation in the next 30 days, higher than 74% of all scored CVEs.

Exploits and detections

• EDB-245 HP-UX 11.0 - '/bin/cu' Local Privilege Escalation · local · 2001-01-13
• EDB-20373 HP-UX 9.x/10.x/11.x - cu Buffer Overflow · dos · 2000-11-02

CVSS scores

References

• securityfocus.com /bid/1886 · vdb-entry, x_refsource_BID, x_transferred
• exchange.xforce.ibmcloud.com /vulnerabilities/5460 · vdb-entry, x_refsource_XF, x_transferred
• securityfocus.com /archive/1/142792 · mailing-list, x_refsource_BUGTRAQ, x_transferred

Sources

• CVE List: CVE-2000-1028
• NVD: CVE-2000-1028

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.