CVE-2001-0873

high

Description

uuxqt in Taylor UUCP package does not properly remove dangerous long options, which allows local users to gain privileges by calling uux and specifying an alternate configuration file with the --config option.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/7099

http://www.novell.com/linux/security/advisories/2001_038_uucp_txt.html

http://www.debian.org/security/2001/dsa-079

http://www.calderasystems.com/support/security/advisories/CSSA-2001-033.0.txt

http://rhn.redhat.com/errata/RHSA-2001-165.html

http://marc.info/?l=bugtraq&m=100715446131820

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000425

Details

Source: Mitre, NVD

Published: 2001-12-21

Updated: 2017-10-10

Risk Information

CVSS v2

Base Score: 7.2

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 7.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H