Lucene search
HistorySep 12, 2001 - 4:00 a.m.
CVE-2000-1202
cve-2000-1202
ibm ibmhsssb 1.0
ikeyman
classpath
root
code execution
security vulnerability.
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
7.5 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
ikeyman in IBM IBMHSSSB 1.0 sets the CLASSPATH environmental variable to include the user’s own CLASSPATH directories before the system’s directories, which allows a malicious local user to execute arbitrary code as root via a Trojan horse Ikeyman class.
Affected configurations
Node
ibmhttp_server_ssl_module_commonMatch1.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| ibm:http_server_ssl_module_common | ibm http server ssl module common | eq | 1.0 |
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
7.5 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2000-1202