CVE-2001-1091: High severity NetBSD NetBSD vulnerability
Published Aug 23, 2001
·Updated
The (1) dump and (2) dumplfs commands in NetBSD 1.4.x through 1.5.1 do not properly drop privileges, which could allow local users to gain privileges via the RCMDCMD environment variable.
Affected Software
6 affected components
NetBSD NetBSD=1.4
NetBSD NetBSD=1.4.1
NetBSD NetBSD=1.4.2
NetBSD NetBSD=1.4.3
NetBSD NetBSD=1.5
NetBSD NetBSD=1.5.1
Event History
Aug 23, 2001
CVE Published
04:00 AM
Mar 15, 2002
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2001-1091?
CVE-2001-1091 is considered a moderate severity vulnerability due to its local privilege escalation potential.
2
How do I fix CVE-2001-1091?
To remediate CVE-2001-1091, users should upgrade to a patched version of NetBSD that addresses the privilege escalation issue.
3
Which versions of NetBSD are affected by CVE-2001-1091?
CVE-2001-1091 affects NetBSD versions 1.4 through 1.5.1.
4
What type of attack does CVE-2001-1091 enable?
CVE-2001-1091 enables local users to gain elevated privileges by exploiting improperly dropped privileges in the dump commands.
5
Is CVE-2001-1091 applicable to remote attacks?
No, CVE-2001-1091 is not applicable to remote attacks as it requires local access to exploit the vulnerability.