CVE-2000-0078

High

Published: 02/01/2000(UTC)Updated: 16/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.53%

40th percentile - higher than 40% of all known CVEs

Summary

The June 1999 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the awk command.

Risk Assessment

This vulnerability may lead to unauthorized access to the system, posing a serious security threat to the organization.

Recommendation

It is recommended to update the aserver program to the latest version and restrict local users' ability to modify the PATH variable.

Other vulnerabilities in HP-UX aserver

CVE-2000-0077High
The October 1998 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the ps and grep commands.

Original NVD description (English source)

The June 1999 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the awk command.