Lucene search

K
cveMitreCVE-2000-1009
HistoryDec 11, 2000 - 5:00 a.m.

CVE-2000-1009

2000-12-1105:00:00
mitre
web.nvd.nist.gov
24
red hat linux
cve-2000-1009
rsh variable
root privileges
trojan horse
nvd.

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.2

Confidence

High

EPSS

0

Percentile

0.4%

dump in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modifying the RSH variable to point to a Trojan horse program.

Affected configurations

Nvd
Node
redhatlinuxMatch6.2
OR
trustixsecure_linuxMatch1.1
VendorProductVersionCPE
redhatlinux6.2cpe:2.3:o:redhat:linux:6.2:*:*:*:*:*:*:*
trustixsecure_linux1.1cpe:2.3:o:trustix:secure_linux:1.1:*:*:*:*:*:*:*

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.2

Confidence

High

EPSS

0

Percentile

0.4%

Related for CVE-2000-1009