critical10.0Public exploit code
CVE-2000-0757
The sysgen service in Aptis Totalbill does not perform authentication, which allows remote attackers to gain root privileges by connecting to the service and s…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Aptis Software TotalBill 3.0 - Remote Command Execution2000-08-08 · remote · linux · Verified
Impact
The sysgen service in Aptis Totalbill does not perform authentication, which allows remote attackers to gain root privileges by connecting to the service and specifying the commands to be executed.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aptis Software | Totalbill | Version 3.0 |