Description
stmkfont in HP-UX B.11.00 through B.11.23 relies on the user-specified PATH when executing certain commands, which allows local users to execute arbitrary code by modifying the PATH environment variable to point to malicious programs.
References
- hpux-stmkfont-gain-privileges(17813) vdb-entry
- 11493 vdb-entry
- 20041021 NSFOCUS SA2004-02 : HP-UX stmkfont Local Privilege Escalation Vulnerability mailing-list
- oval:org.mitre.oval:def:5538 vdb-entry signature
- SSRT4807 vendor-advisory
- http://www.nsfocus.com/english/homepage/research/0402.htm