CVEvulnerability
CVE-2001-0873
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2001-12-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
uuxqt in Taylor UUCP package does not properly remove dangerous long options, which allows local users to gain privileges by calling uux and specifying an alternate configuration file with the --config option.
Affected configurations
• ian lance taylor taylor uucp 1.0.6
References
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000425 Patch, Vendor Advisory
- http://marc.info/?l=bugtraq&m=100715446131820 marc.info
- http://rhn.redhat.com/errata/RHSA-2001-165.html rhn.redhat.com
- http://www.calderasystems.com/support/security/advisories/CSSA-2001-033.0.txt Patch, Vendor Advisory
- http://www.debian.org/security/2001/dsa-079 www.debian.org
- http://www.novell.com/linux/security/advisories/2001_038_uucp_txt.html www.novell.com
- http://www.securityfocus.com/archive/1/212892 Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/3312 Exploit, Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7099 exchange.xforce.ibmcloud.com
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000425 Patch, Vendor Advisory
- http://marc.info/?l=bugtraq&m=100715446131820 marc.info
- http://rhn.redhat.com/errata/RHSA-2001-165.html rhn.redhat.com
- http://www.calderasystems.com/support/security/advisories/CSSA-2001-033.0.txt Patch, Vendor Advisory
- http://www.debian.org/security/2001/dsa-079 www.debian.org
- http://www.novell.com/linux/security/advisories/2001_038_uucp_txt.html www.novell.com
- http://www.securityfocus.com/archive/1/212892 Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/3312 Exploit, Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7099 exchange.xforce.ibmcloud.com