CVE-2000-1119: Buffer Overflow
Published Jan 9, 2001
·Updated
Buffer overflow in setsenv command in IBM AIX 4.3.x and earlier allows local users to execute arbitrary commands via a long "x=" argument.
Affected Software
6 affected components
IBM AIX=4.3.2
IBM AIX=4.3
IBM AIX=4.2.1
IBM AIX=4.2
IBM AIX=4.3.3
IBM AIX=4.3.1
Remediation
Patch Available
Event History
Jan 9, 2001
CVE Published
05:00 AM
May 7, 2001
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2000-1119?
CVE-2000-1119 has a high severity rating due to the potential for arbitrary command execution by local users.
2
How do I fix CVE-2000-1119?
To fix CVE-2000-1119, it is recommended to upgrade to a version of IBM AIX that is not vulnerable, such as AIX 5.0 or later.
3
What versions of IBM AIX are affected by CVE-2000-1119?
CVE-2000-1119 affects IBM AIX versions 4.3.x and earlier, including 4.2.x.
4
Can CVE-2000-1119 be exploited remotely?
No, CVE-2000-1119 can only be exploited locally by users who already have access to the system.
5
What type of vulnerability is CVE-2000-1119?
CVE-2000-1119 is classified as a buffer overflow vulnerability.