Lucene search

[email protected]CVE-2001-0855

HistoryDec 06, 2001 - 5:00 a.m.

CVE-2001-0855

2001-12-0605:00:00

[email protected]

web.nvd.nist.gov

cve-2001-0855

buffer overflow

clearcase 4.2

local user

root access

nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

JSON

Buffer overflow in db_loader in ClearCase 4.2 and earlier allows local users to gain root privileges via a long TERM environment variable.

Affected configurations

NVD

Node

rational_softwareclearcaseMatch3.2_plus

rational_softwareclearcaseMatch4.0

rational_softwareclearcaseMatch4.1

rational_softwareclearcaseMatch4.2

CPENameOperatorVersion
rational_software:clearcaserational software clearcaseeq3.2_plus
rational_software:clearcaserational software clearcaseeq4.0
rational_software:clearcaserational software clearcaseeq4.1
rational_software:clearcaserational software clearcaseeq4.2

CPE	Name	Operator	Version
rational_software:clearcase	rational software clearcase	eq	3.2_plus
rational_software:clearcase	rational software clearcase	eq	4.0
rational_software:clearcase	rational software clearcase	eq	4.1
rational_software:clearcase	rational software clearcase	eq	4.2

References

marc.info/?l=bugtraq&m=100528623328037&w=2

www.iss.net/security_center/static/7488.php

www.securityfocus.com/bid/3523

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

JSON

Related for CVE-2001-0855

cvelist1 nvd1