rcvtty in BSD 3.0 and 4.0 does not properly drop privileges before executing a script, which allows local attackers to gain privileges by specifying an alternate Trojan horse script on the command line.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/2009 | Exploit Vendor Advisory |
http://www.securityfocus.com/archive/1/147120 | Exploit Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2001-01-08 21:00
Updated : 2008-09-05 13:22
NVD link : CVE-2000-1103
Mitre link : CVE-2000-1103
JSON object : View
CWE
Products Affected
bsdi
- bsd_os