vendor:
HP-UX
by:
Kyong-won,Cho
7,5
CVSS
HIGH
Command Injection
78
CWE
Product Name: HP-UX
Affected Version From: HP-UX 11.00/10.20
Affected Version To: HP-UX 11.00/10.20
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Unix
2000
HP-UX 11.00/10.20 crontab
This exploit allows an attacker to execute arbitrary commands on a vulnerable system. The vulnerability exists in the crontab command, which allows an attacker to inject malicious code into the crontab file. The malicious code is then executed when the crontab is executed. The exploit uses a symbolic link to inject the malicious code into the crontab file.
Mitigation:
The best way to mitigate this vulnerability is to ensure that the crontab command is not used in a way that allows an attacker to inject malicious code.
