ID CVE-2004-0965
Summary stmkfont in HP-UX B.11.00 through B.11.23 relies on the user-specified PATH when executing certain commands, which allows local users to execute arbitrary code by modifying the PATH environment variable to point to malicious programs.
References
Vulnerable Configurations
  • HP-UX 11.00
    cpe:2.3:o:hp:hp-ux:11.00
  • HP-UX 11.11
    cpe:2.3:o:hp:hp-ux:11.11
  • HP-UX 11i v1.6
    cpe:2.3:o:hp:hp-ux:11.22
  • cpe:2.3:o:hp:hp-ux:11.23:-:ia64_64-bit
    cpe:2.3:o:hp:hp-ux:11.23:-:ia64_64-bit
CVSS
Base: 7.2 (as of 01-01-2004 - 00:00)
Impact:
Exploitability:
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
nessus via4
  • NASL family HP-UX Local Security Checks
    NASL id HPUX_PHSS_31987.NASL
    description s700_800 11.00 X Font Server Patch : A potential security vulnerability has been reported with the HP-UX stmkfont program. This vulnerability can be exploited to allow local unauthorized access to resources owned by group 'bin.'.
    last seen 2019-02-21
    modified 2013-04-20
    plugin id 16637
    published 2005-02-16
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=16637
    title HP-UX PHSS_31987 : HP-UX stmkfont Local Unauthorized Privileged Access (HPSBUX01088 SSRT4807 rev.2)
  • NASL family HP-UX Local Security Checks
    NASL id HPUX_PHSS_31988.NASL
    description s700_800 11.11 X Font Server Patch : A potential security vulnerability has been reported with the HP-UX stmkfont program. This vulnerability can be exploited to allow local unauthorized access to resources owned by group 'bin.'.
    last seen 2019-02-21
    modified 2013-04-20
    plugin id 16636
    published 2005-02-16
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=16636
    title HP-UX PHSS_31988 : HP-UX stmkfont Local Unauthorized Privileged Access (HPSBUX01088 SSRT4807 rev.2)
  • NASL family HP-UX Local Security Checks
    NASL id HPUX_PHSS_31990.NASL
    description s700_800 11.23 X Font Server Patch : A potential security vulnerability has been reported with the HP-UX stmkfont program. This vulnerability can be exploited to allow local unauthorized access to resources owned by group 'bin.'.
    last seen 2019-02-21
    modified 2013-04-20
    plugin id 16633
    published 2005-02-16
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=16633
    title HP-UX PHSS_31990 : HP-UX stmkfont Local Unauthorized Privileged Access (HPSBUX01088 SSRT4807 rev.2)
  • NASL family HP-UX Local Security Checks
    NASL id HPUX_PHSS_31989.NASL
    description s700_800 11.22 X Font Server Patch : A potential security vulnerability has been reported with the HP-UX stmkfont program. This vulnerability can be exploited to allow local unauthorized access to resources owned by group 'bin.'.
    last seen 2019-02-21
    modified 2013-04-20
    plugin id 16635
    published 2005-02-16
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=16635
    title HP-UX PHSS_31989 : HP-UX stmkfont Local Unauthorized Privileged Access (HPSBUX01088 SSRT4807 rev.2)
  • NASL family HP-UX Local Security Checks
    NASL id HPUX_PHSS_32196.NASL
    description s700_800 11.04 (VVOS) X Font Server Patch : A potential security vulnerability has been reported with the HP-UX stmkfont program. This vulnerability can be exploited to allow local unauthorized access to resources owned by group 'bin.'.
    last seen 2019-02-21
    modified 2013-04-20
    plugin id 26746
    published 2007-10-03
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=26746
    title HP-UX PHSS_32196 : HP-UX stmkfont Local Unauthorized Privileged Access (HPSBUX01088 SSRT4807 rev.2)
oval via4
accepted 2014-03-24T04:01:42.227-04:00
class vulnerability
contributors
  • name Michael Wood
    organization Hewlett-Packard
  • name Sushant Kumar Singh
    organization Hewlett-Packard
  • name Sushant Kumar Singh
    organization Hewlett-Packard
description stmkfont in HP-UX B.11.00 through B.11.23 relies on the user-specified PATH when executing certain commands, which allows local users to execute arbitrary code by modifying the PATH environment variable to point to malicious programs.
family unix
id oval:org.mitre.oval:def:5538
status accepted
submitted 2008-07-07T16:38:36.000-04:00
title HP-UX stmkfont Local Unauthorized Privileged Access
version 35
refmap via4
bid 11493
bugtraq 20041021 NSFOCUS SA2004-02 : HP-UX stmkfont Local Privilege Escalation Vulnerability
hp SSRT4807
misc http://www.nsfocus.com/english/homepage/research/0402.htm
xf hpux-stmkfont-gain-privileges(17813)
Last major update 17-10-2016 - 22:50
Published 09-02-2005 - 00:00
Last modified 10-10-2017 - 21:29
Back to Top