VULNERABILITY INTELLIGENCE

CVE-2008-6558

CVSS score7.2 HIGH
EPSS probability0.87%
CISA KEVNot currently listed
Published2009-03-30
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C

Description

Untrusted search path vulnerability in (1) hvdisp and (2) rcvm in ReliantHA 1.1.4 in SCO UnixWare 7.1.4 allows local users to gain root privileges by modifying the RELIANT_PATH environment variable to point to a malicious bin/hvenv program.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references