CVE-2000-0077

High

Published: 02/01/2000(UTC)Updated: 16/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.98%

57th percentile - higher than 57% of all known CVEs

Summary

The October 1998 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the ps and grep commands.

Risk Assessment

Local users may gain unauthorized privileges, potentially leading to serious security breaches in the system.

Recommendation

It is recommended to update the aserver program to the latest version and restrict local users' ability to modify the PATH variable.

Other vulnerabilities in HP-UX aserver

CVE-2000-0078High
The June 1999 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the awk command.

Original NVD description (English source)

The October 1998 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the ps and grep commands.