CVE-2000-0972
MediumCVSS 5.5Exploitation Probability (EPSS)
Elevated risk69th percentile - higher than 69% of all known CVEs
Summary
HP-UX 11.00 crontab allows local users to read arbitrary files via the -e option by creating a symlink to the target file during the crontab session, quitting the session, and reading the error messages that crontab generates.
Risk Assessment
A local user can read arbitrary files they are not authorized to access, potentially leading to exposure of sensitive data or further attacks.
Recommendation
Apply the patch from HP or upgrade the system. Restrict access to crontab to trusted users and monitor the use of the -e option.
Other vulnerabilities in HP-UX
See all- CVE-1999-1308Medium
Certain programs in HP-UX 10.20 do not properly handle large user IDs (UID) or group IDs (GID) over 60000, which could allow local users to gain privileges.
- CVE-1999-0311High
fpkg2swpk in HP-UX allows local users to gain root access.
- CVE-1999-1239Medium
HP-UX 9.x does not properly enable the Xauthority mechanism in certain conditions, which could allow local users to access the X display even when they have not explicitly been authorized to do so.
Original NVD description (English source)
HP-UX 11.00 crontab allows local users to read arbitrary files via the -e option by creating a symlink to the target file during the crontab session, quitting the session, and reading the error messages that crontab generates.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS