CVE-2003-1358
HP-UX 10.0-11.22 - Privilege Escalation via PATH Environment Variable Manipulation
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2003-1358. PoCs published by Last Stage of Delirium.
AI-analyzed exploit summary This exploit targets a vulnerability in the rs.F3000 binary on HP-UX 10.20, where unsafe usage of the system() function allows command injection. It creates a malicious script in /tmp/rm, manipulates the PATH environment variable, and executes the vulnerable binary to gain a root shell.
Description
rs.F300 for HP-UX 10.0 through 11.22 uses the PATH environment variable to find and execute programs such as rm while operating at raised privileges, which allows local users to gain privileges by modifying the path to point to a malicious rm program.
Exploits (1)
This exploit targets a vulnerability in the rs.F3000 binary on HP-UX 10.20, where unsafe usage of the system() function allows command injection. It creates a malicious script in /tmp/rm, manipulates the PATH environment variable, and executes the vulnerable binary to gain a root shell.