CVE-2000-0595

libedit searches for the .editrc file in the current directory instead of the user's home directory, which may allow local users to execute arbitrary commands by installing a modified .editrc in another directory.

Score

CVSS 2.0 4.6 Medium

Status

Modified - cve@mitre.org

Published

2000-07-05

Last modified

2024-08-08

Affected products

• Freebsd (Freebsd)

References

• http://archives.neohapsis.com/archives/freebsd/2000-07/0035.html
• http://www.osvdb.org/1446
• http://www.securityfocus.com/bid/1437