CVE-2000-0077

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

The October 1998 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the ps and grep commands.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published: Jan 2, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-00787.2The June 1999 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses CVE-2000-00797.5The W3C CERN httpd HTTP server allows remote attackers to determine the real pathnames of some commands via a request for a nonexistent URL.CVE-2000-00802.1AIX techlibss allows local users to overwrite files via a symlink attack.CVE-2000-008110.0Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute the code by using hexadeci CVE-2000-00825.0WebTV email client allows remote attackers to force the client to send email without the user's knowledge via HTML.CVE-2000-00834.6HP asecure creates the Audio Security File audio.sec with insecure permissions, which allows local users to cause a denial of service or gai CVE-2000-00845.0CuteFTP uses weak encryption to store password information in its tree.dat file.CVE-2000-00857.5Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute code via the LOWSRC or DYN CVE-2000-00865.0Netopia Timbuktu Pro sends user IDs and passwords in cleartext, which allows remote attackers to obtain them via sniffing.CVE-2000-00875.0Netscape Mail Notification (nsnotify) utility in Netscape Communicator uses IMAP without SSL, even if the user has set a preference for Comm CVE-2000-00887.2Buffer overflow in the conversion utilities for Japanese, Korean and Chinese Word 5 documents allows an attacker to execute commands, aka th CVE-2000-00892.1The rdisk utility in Microsoft Terminal Server Edition and Windows NT 4.0 stores registry hive information in a temporary file with permissi