Lucene search
HistoryMay 07, 2001 - 4:00 a.m.
CVE-2000-0693
cve-2000-0693
raptor gfx
pgxconfig
system call
arbitrary command execution
relative path
local users
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
7.6 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
pgxconfig in the Raptor GFX configuration tool uses a relative path name for a system call to the “cp” program, which allows local users to execute arbitrary commands by modifying their path to point to an alternate “cp” program.
Affected configurations
Node
tech-sourceraptor_gfx_pgx32Match2.3.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| tech-source:raptor_gfx_pgx32 | tech-source raptor gfx pgx32 | eq | 2.3.1 |
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
7.6 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2000-0693