high7.2Public exploit code
CVE-2001-0087
itetris/xitetris 1.6.2 and earlier trusts the PATH environmental variable to find and execute the gunzip program, which allows local users to gain root privile…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Itetris 1.6.1/1.6.2 - Privileged Arbitrary Command Execution2000-12-19 · local · linux · Verified
Impact
itetris/xitetris 1.6.2 and earlier trusts the PATH environmental variable to find and execute the gunzip program, which allows local users to gain root privileges by changing their PATH so that it points to a malicious gunzip program.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Michael Glickman | Itetris | Versions 1.6.1, 1.6.2 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2000-12/0295.html
- http://www.securityfocus.com/bid/2139
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5795
- http://archives.neohapsis.com/archives/bugtraq/2000-12/0295.html
- http://www.securityfocus.com/bid/2139
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5795