Vulnerability Name: | CVE-2003-0061 (CCN-25224) | ||||||||
Assigned: | 2002-01-11 | ||||||||
Published: | 2002-01-11 | ||||||||
Updated: | 2008-09-05 | ||||||||
Summary: | Buffer overflow in passwd for HP UX B.10.20 allows local users to execute arbitrary commands with root privileges via a long LANG environment variable. | ||||||||
CVSS v3 Severity: | 9.3 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
| ||||||||
CVSS v2 Severity: | 7.2 High (CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C)
| ||||||||
Vulnerability Type: | CWE-Other | ||||||||
Vulnerability Consequences: | Gain Privileges | ||||||||
References: | Source: MITRE Type: CNA CVE-2003-0061 Source: IDEFENSE Type: Vendor Advisory 20030203 HP UX passwd Binary Buffer Overflow Vulnerability Source: CCN Type: OSVDB ID: 19179 HP-UX passwd LANG Variable Local Overflow Source: XF Type: UNKNOWN hpux-passwd-lang-bo(25224) Source: CCN Type: iDEFENSE Security Advisory: 02.03.03 HP UX passwd Binary Buffer Overflow Vulnerability | ||||||||
Vulnerable Configuration: | Configuration 1:![]() | ||||||||
BACK |