vulnwire
7.2high

CVE-2000-11253 exploits

restore 0.4b15 and earlier in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users t…

Published 25 y ago · modified 4 mo ago · JSON

CVSS
7.2
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
1.1%
percentile 66%
Public exploits
3
Exploit-DB

restore 0.4b15 and earlier in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modifying the RSH variable to point to a Trojan horse program.

Exploit prediction (EPSS)

1.11% probability of exploitation in the next 30 days, higher than 66% of all scored CVEs.

Exploits and detections

  • EDB-20385 RedHat 0.4 b15 restore - Insecure Environment Variables · local · 2000-11-04
  • EDB-184 RedHat 6.2 Restore and Dump - Local Privilege Escalation · local · 2000-11-16
  • EDB-182 RedHat 6.2 - '/sbin/restore' Local Privilege Escalation · local · 2000-11-16

CVSS scores

Assigned byVersionScoreVector
NVD2.07.2AV:L/AC:L/Au:N/C:C/I:C/A:C

References

  • securityfocus.com /bid/1914 · vdb-entry, x_refsource_BID, x_transferred
  • marc.info /?l=bugtraq&m=97336034309944&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.