7.2
CVE-2001-0087
- EPSS 0.9%
- Veröffentlicht 12.02.2001 05:00:00
- Zuletzt bearbeitet 16.06.2026 21:53:37
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
Loginitetris/xitetris 1.6.2 and earlier trusts the PATH environmental variable to find and execute the gunzip program, which allows local users to gain root privileges by changing their PATH so that it points to a malicious gunzip program.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Michael Glickman ≫ Itetris Version1.6.1
Michael Glickman ≫ Itetris Version1.6.2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.9% | 0.548 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.2 | 3.9 | 10 |
AV:L/AC:L/Au:N/C:C/I:C/A:C
|
http://archives.neohapsis.com/archives/bugtraq/2000-12/0295.html
http://www.securityfocus.com/bid/2139
https://exchange.xforce.ibmcloud.com/vulnerabilities/5795