7.2high
CVE-2003-13581 exploit
rs.F300 for HP-UX 10.0 through 11.22 uses the PATH environment variable to find and execute programs such as rm while operating at raised p…
Published 22 y ago · modified 4 mo ago · JSON
CVSS
7.2
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
1.0%
percentile 62%
Public exploits
1
Exploit-DB
Summary
rs.F300 for HP-UX 10.0 through 11.22 uses the PATH environment variable to find and execute programs such as rm while operating at raised privileges, which allows local users to gain privileges by modifying the path to point to a malicious rm program.
Exploit prediction (EPSS)
0.95% probability of exploitation in the next 30 days, higher than 62% of all scored CVEs.
Exploits and detections
- EDB-22248 HP-UX 10.x - rs.F3000 Unauthorized Access · local · 2003-02-12
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 7.2 | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Classification
- Weakness
- CWE-264 Permissions, Privileges, and Access Controls
References
- securityfocus.com /advisories/4960 · vendor-advisory, x_refsource_HP, x_transferred
- securityfocus.com /archive/1/324381 · mailing-list, x_refsource_BUGTRAQ, x_transferred
- securityreason.com /securityalert/3236 · third-party-advisory, x_refsource_SREASON, x_transferred
- securityfocus.com /bid/6837 · vdb-entry, x_refsource_BID, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/11312 · vdb-entry, x_refsource_XF, x_transferred
Sources
- CVE List: CVE-2003-1358
- NVD: CVE-2003-1358
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.