CVE-2001-0873

uuxqt in Taylor UUCP package does not properly remove dangerous long options, which allows local users to gain privileges by calling uux and specifying an alternate configuration file with the --config option.

CVSS v2.0 NVD

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

1.08% chance of exploitation in the next 30 days, 64th percentile

Published

2003-04-02

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/21106

Security advisories

• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000425
• http://www.calderasystems.com/support/security/advisories/CSSA-2001-033.0.txt
• http://www.securityfocus.com/archive/1/212892
• http://www.securityfocus.com/bid/3312

References

• CVE Record
• NVD entry