Exploitation Summary
EIP tracks 1 public exploit for CVE-2000-0077. PoCs published by Loneguard.
AI-analyzed exploit summary This exploit leverages a PATH environment variable manipulation in HP-UX's Aserver to execute arbitrary code as root. It creates a malicious 'ps' script in /var/tmp that copies and sets the setuid bit on /bin/csh, then executes Aserver with the -f argument to trigger the vulnerability.
Description
The October 1998 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the ps and grep commands.
Exploits (1)
This exploit leverages a PATH environment variable manipulation in HP-UX's Aserver to execute arbitrary code as root. It creates a malicious 'ps' script in /var/tmp that copies and sets the setuid bit on /bin/csh, then executes Aserver with the -f argument to trigger the vulnerability.