CVE-2004-0965: HP HP-Ux

High severity, CVSS 7.2. EPSS: 0.7% chance of exploitation in the next 30 days.

stmkfont in HP-UX B.11.00 through B.11.23 relies on the user-specified PATH when executing certain commands, which allows local users to execute arbitrary code by modifying the PATH environment variable to point to malicious programs.

Affected products

• HP HP-Ux: version 11.00 only; version 11.11 only; version 11.22 only; version 11.23 only

Published 2005-02-09. Last modified 2026-06-16.