CVE-2000-1125

restore 0.4b15 and earlier in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modifying the RSH variable to point to a Trojan horse program.

Score

CVSS 2.0 7.2 High

Status

Modified - cve@mitre.org

Published

2001-01-09

Last modified

2024-08-08

Affected products

• Linux (Redhat)

References

• http://marc.info/?l=bugtraq&m=97336034309944&w=2
• http://www.securityfocus.com/bid/1914