CVE-2000-1103

rcvtty in BSD 3.0 and 4.0 does not properly drop privileges before executing a script, which allows local attackers to gain privileges by specifying an alternate Trojan horse script on the command line.

CVSS v2.0

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.94% chance of exploitation in the next 30 days, 59th percentile

Published

2000-12-19

Updated

2024-08-08

Proof-of-concept exploits (1)

• http://www.securityfocus.com/archive/1/147120

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/202

References

• CVE Record
• NVD entry

Related

• CVE-2000-1100
• CVE-2000-1105
• CVE-2000-1096
• CVE-2000-1110
• CVE-2000-1095
• CVE-2000-1112