PT-2000-1919 · Red Hat · Red Hat

Publicado 2000-12-11 · Atualizado 2017-12-19 · CVE-2000-1009

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Red Hat Linux version 6.2

Description The issue allows local users to obtain root privileges by modifying the RSH environmental variable to point to a Trojan horse program, as the dump utility in the affected system trusts the pathname specified by this variable.

Recommendations For Red Hat Linux version 6.2, update the system to prevent the dump utility from trusting the RSH environmental variable, or restrict access to the dump utility to prevent exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2000-1009

Produtos afetados

Red Hat

Referências · 6

• 🔥 https://exploit-db.com/exploits/206 · Exploit
• 🔥 https://exploit-db.com/exploits/193 · Exploit
• 🔥 http://securityfocus.com/bid/1871 · Exploit
• http://archives.neohapsis.com/archives/bugtraq/2000-10/0438.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2000-1009 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5437 · Nota