high7.2Public exploit code
CVE-2000-0009
The bna_pass program in Optivity NETarchitect uses the PATH environmental variable for finding the "rm" program, which allows local users to execute arbitrary …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Nortel Networks Optivity NETarchitect 2.0 - PATH1999-12-30 · local · multiple · Verified
Impact
The bna_pass program in Optivity NETarchitect uses the PATH environmental variable for finding the "rm" program, which allows local users to execute arbitrary commands.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nortel | Optivity Net Architect | Version 2.0 |