PT-2001-1164 · Red Hat · Restore+1

Published 2001-01-09 · Updated 2016-10-18 · CVE-2000-1125

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Red Hat Linux version 6.2 with restore 0.4b15 and earlier

Description The issue allows local users to obtain root privileges by modifying the RSH environmental variable to point to a Trojan horse program, as the restore utility trusts the pathname specified by this variable.

Recommendations For Red Hat Linux 6.2 with restore 0.4b15 and earlier, consider restricting access to the RSH environmental variable to prevent unauthorized modifications until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2000-1125

Affected Products

Red Hat

Restore

References · 6

• 🔥 https://exploit-db.com/exploits/184 · Exploit
• 🔥 https://exploit-db.com/exploits/20385 · Exploit
• 🔥 http://securityfocus.com/bid/1914 · Exploit
• 🔥 https://exploit-db.com/exploits/182 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-1125 · Security Note
• http://marc.info/?l=bugtraq&m=97336034309944&w=2 · Note