NVD

Id
78316  
Name
CVE-2001-0873  
Description
uuxqt in Taylor UUCP package does not properly remove dangerous long options, which allows local users to gain privileges by calling uux and specifying an alternate configuration file with the --config option.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-05  
Published
2001-12-21  
Modified Date
2016-10-17  
Seq
2001-0873  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
391773 78316 CVE-2001-0873 CLA-2001:425  View
391774 78316 CVE-2001-0873 20011130 Redhat 7.0 local root (via uucp) (attempt 2)  View
391775 78316 CVE-2001-0873 RHSA-2001:165  View
391776 78316 CVE-2001-0873 CSSA-2001-033.0  View
391777 78316 CVE-2001-0873 DSA-079  View
391778 78316 CVE-2001-0873 SuSE-SA:2001:38  View
391779 78316 CVE-2001-0873 20010908 Multiple vendor "Taylor UUCP" problems.  View
391780 78316 CVE-2001-0873 3312  View
391781 78316 CVE-2001-0873 uucp-argument-gain-privileges(7099)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
64166 JVNDB-2001-000140 Taylor UUCP の uuxqt における権限昇格の脆弱性 Taylor UUCP(Unix to Unix CoPy) において、 Taylor UUCP に、-- config flag を経由して uucp リクエストを送信する際に、悪意のある -- config flag ファイルを使用した実行コマンドを uux が受け取った場合に、uuxpt 権限で実行される脆弱性が存在します。 CVE-2001-0873 3679 CVE-2001-0873 78316 7.2 http://jvndb.jvn.jp/ja/contents/2001/JVNDB-2001-000140.html 2001-09-08 2007-04-01 View