NVD

Id
76944  
Name
CVE-2000-0703  
Description
suidperl (aka sperl) does not properly cleanse the escape sequence "~!" before calling /bin/mail to send an error report, which allows local users to gain privileges by setting the "interactive" environmental variable and calling suidperl with a filename that contains the escape sequence.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-05  
Published
2000-10-20  
Modified Date
2008-09-10  
Seq
2000-0703  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
387183 76944 CVE-2000-0703 20000805 sperl 5.00503 (and newer ;) exploit  View
387184 76944 CVE-2000-0703 20000808 MDKSA-2000:031 perl update  View
387185 76944 CVE-2000-0703 20000810 Conectiva Linux security announcemente - PERL  View
387186 76944 CVE-2000-0703 20000814 Trustix Security Advisory - perl and mailx  View
387187 76944 CVE-2000-0703 CSSA-2000-026.0  View
387188 76944 CVE-2000-0703 20000810 Security Hole in perl, all versions  View
387189 76944 CVE-2000-0703 RHSA-2000:048  View
387190 76944 CVE-2000-0703 1547  View
387191 76944 CVE-2000-0703 TLSA2000018-1  View

Related JVN