PT-2001-1164 · Red Hat · Restore+1

Publicado 2001-01-09 · Atualizado 2016-10-18 · CVE-2000-1125

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Red Hat Linux version 6.2 with restore 0.4b15 and earlier

Description The issue allows local users to obtain root privileges by modifying the RSH environmental variable to point to a Trojan horse program, as the restore utility trusts the pathname specified by this variable.

Recommendations For Red Hat Linux 6.2 with restore 0.4b15 and earlier, consider restricting access to the RSH environmental variable to prevent unauthorized modifications until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2000-1125

Produtos afetados

Red Hat

Restore

Referências · 6

• 🔥 https://exploit-db.com/exploits/184 · Exploit
• 🔥 https://exploit-db.com/exploits/20385 · Exploit
• 🔥 http://securityfocus.com/bid/1914 · Exploit
• 🔥 https://exploit-db.com/exploits/182 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-1125 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=97336034309944&w=2 · Nota