CVE-2008-6558

CVSS V2 High 7.2 CVSS V3 None
Description
Untrusted search path vulnerability in (1) hvdisp and (2) rcvm in ReliantHA 1.1.4 in SCO UnixWare 7.1.4 allows local users to gain root privileges by modifying the RELIANT_PATH environment variable to point to a malicious bin/hvenv program.
Overview
  • CVE ID
  • CVE-2008-6558
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Modified
  • Published Version
  • 2009-03-30T20:30:00
  • Last Modified Date
  • 2017-09-29T01:33:14
Weakness Enumerations
CWE URL
CWE-20 http://cwe.mitre.org/data/definitions/20.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
AND
cpe:2.3:o:sco:unixware:7.1.4:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:unixware:reliantha:1.1.4:*:*:*:*:*:*:* 1 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:L/AC:L/Au:N/C:C/I:C/A:C
  • Access Vector
  • LOCAL
  • Access Compatibility
  • LOW
  • Authentication
  • NONE
  • Confidentiality Impact
  • COMPLETE
  • Integrity Impact
  • COMPLETE
  • Availability Impact
  • COMPLETE
  • Base Score
  • 7.2
  • Severity
  • HIGH
  • Exploitability Score
  • 3.9
  • Impact Score
  • 10
References
Reference URL Reference Tags
http://osvdb.org/46706
ftp://ftp.sco.com/pub/unixware7/714/security/p534850/p534850.txt Patch Vendor Advisory
http://www.securityfocus.com/bid/28624 Exploit
http://osvdb.org/46707
http://secunia.com/advisories/30921 Vendor Advisory
https://www.exploit-db.com/exploits/5356
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2008-6558
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-6558
History
Created Old Value New Value Data Type Notes
2022-05-10 08:21:07 Added to TrackCVE