CVE-2000-1127

CVE-2000-1127 describes a local privilege escalation vulnerability in the HP resource monitor service's registrar component on HP-UX systems. An attacker can manipulate the registrar.log file by renaming it and creating a symbolic link to an arbitrary target file. This allows the registrar to append log information to the target file and set its permissions to world-readable, facilitating unauthorized file reading and modification. The vulnerability has a CVSS score of 3.6 (LOW), indicating a low severity. It requires local access (AV:L) and low attack complexity (AC:L), with no authentication needed (Au:N). The potential impact includes partial confidentiality (C:P) and partial integrity (I:P) compromise, but no availability impact (A:N). There is no evidence of active exploitation (KEV: No, Hot List: Inactive). While no Metasploit or Nuclei modules exist, an exploit for arbitrary file read (EDB-20386) is available on ExploitDB. Community discussion and media coverage for this CVE are minimal.