VULNERABILITY INTELLIGENCE

CVE-2004-0965

CVSS score7.2 HIGH
EPSS probability0.65%
CISA KEVNot currently listed
Published2005-02-09
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C

Description

stmkfont in HP-UX B.11.00 through B.11.23 relies on the user-specified PATH when executing certain commands, which allows local users to execute arbitrary code by modifying the PATH environment variable to point to malicious programs.

Primary references