CVE-2003-1358
Last modified
CVE-2003-1358 is a vulnerability of currently unknown severity. rs.F300 for HP-UX 10.0 through 11.22 uses the PATH environment variable to find and execute programs such as rm while operating at raised privileges, which allows local users to gain privileges by modifying the path to point to a malicious rm program.. EPSS estimates a 0.95% chance of exploitation in the next 30 days.
Description
rs.F300 for HP-UX 10.0 through 11.22 uses the PATH environment variable to find and execute programs such as rm while operating at raised privileges, which allows local users to gain privileges by modifying the path to point to a malicious rm program.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Hp | Hp-Ux | 10.00 |
| Hp | Hp-Ux | 10.01 |
| Hp | Hp-Ux | 10.08 |
| Hp | Hp-Ux | 10.09 |
| Hp | Hp-Ux | 10.10 |
| Hp | Hp-Ux | 10.16 |
| Hp | Hp-Ux | 10.20 |
| Hp | Hp-Ux | 10.24 |
| Hp | Hp-Ux | 10.26 |
| Hp | Hp-Ux | 10.30 |
| Hp | Hp-Ux | 10.34 |
| Hp | Hp-Ux | 11.00 |
| Hp | Hp-Ux | 11.0.4 |
| Hp | Hp-Ux | 11.04 |
| Hp | Hp-Ux | 11.11 |
| Hp | Hp-Ux | 11.20 |
| Hp | Hp-Ux | 11.22 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2003-1358?
How severe is CVE-2003-1358?
How do I fix CVE-2003-1358?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2003
- CVE-2003-1352Gabber 0.8.7 sends an email to a specific address during use…
- CVE-2003-1353Multiple cross-site scripting (XSS) vulnerabilities in Outre…
- CVE-2003-1354Multiple GameSpy 3D 2.62 compatible gaming servers generate …
- CVE-2003-1355Buffer overflow in the remote console (rcon) in Battlefield …
- CVE-2003-1356The "file handling" in sort in HP-UX 10.01 through 10.20, an…
- CVE-2003-1357ProxyView has a default administrator password of Administra…
- CVE-2003-1359Buffer overflow in stmkfont utility of HP-UX 10.0 through 11…
- CVE-2003-1360Buffer overflow in the setupterm function of (1) lanadmin an…
- CVE-2003-1361Unknown vulnerability in VERITAS Bare Metal Restore (BMR) of…
- CVE-2003-1362Bastille B.02.00.00 of HP-UX 11.00 and 11.11 does not proper…
- CVE-2003-1363The remote web management interface of Aprelium Technologies…
- CVE-2003-1364Aprelium Technologies Abyss Web Server 1.1.2, and possibly o…
Are you affected by CVE-2003-1358?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
