CVE-2000-1103

NONE EPSS 56.6%

Published Jan 9, 200125y ago · Modified Jun 16, 20262w ago

Published Jan 9, 2001 25y ago

Last Modified Jun 16, 2026 2w ago

Description

rcvtty in BSD 3.0 and 4.0 does not properly drop privileges before executing a script, which allows local attackers to gain privileges by specifying an alternate Trojan horse script on the command line.

Threat Intelligence

EPSS Exploit Probability

56.6% percentile

Exploit & Patch Status

Public Exploit Known

No Patch Available

Affected Products 4

Vendor	Product	Version	Range
bsdi	bsd_os	3.0	any
bsdi	bsd_os	3.1	any
bsdi	bsd_os	4.0	any
bsdi	bsd_os	4.0.1	any

References 2

securityfocus.com http://www.securityfocus.com/archive/1/147120

ExploitVendor Advisory
securityfocus.com http://www.securityfocus.com/bid/2009

ExploitVendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.