CVE-2000-1009: High severity Trustix Secure Linux vulnerability
Published Nov 29, 2000
·Updated
dump in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modifying the RSH variable to point to a Trojan horse program.
Affected Software
2 affected components
Trustix Secure Linux=1.1
redhat Linux=6.2
Remediation
Patch Available
Event History
Nov 29, 2000
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2000-1009?
CVE-2000-1009 has a moderate severity rating due to its potential to allow local users to escalate privileges.
2
How do I fix CVE-2000-1009?
To fix CVE-2000-1009, you should ensure that the RSH environmental variable is not trusted by implementing stricter security policies.
3
Who is affected by CVE-2000-1009?
CVE-2000-1009 affects users of Red Hat Linux 6.2 and Trustix Secure Linux 1.1.
4
What kind of vulnerability is CVE-2000-1009?
CVE-2000-1009 is a local privilege escalation vulnerability due to improper handling of environmental variables.
5
Can CVE-2000-1009 be exploited remotely?
CVE-2000-1009 cannot be exploited remotely as it requires local access to the affected systems.