CVE Catalog

CVE-2000-0468

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.85%

53th percentile - higher than 53% of all known CVEs

Summary

In HP-UX 10.20 and 11, local attackers can exploit a symlink attack to overwrite files.

Risk Assessment

Attackers may gain access to sensitive data or compromise system integrity, potentially leading to serious consequences for the organization.

Recommendation

It is recommended to restrict access to critical files and to monitor and audit the use of symlinks in the system.

Original NVD description (English source)

man in HP-UX 10.20 and 11 allows local attackers to overwrite files via a symlink attack.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS