CVE-2001-0873 uuxqt in Taylor UUCP package does not properly remove dangerous long options, which allows local users to gain privileges by calling uux and specifying an alternate configuration file with the --confi...
HighCVSS 7.2
EPSS 1.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
uuxqt in Taylor UUCP package does not properly remove dangerous long options, which allows local users to gain privileges by calling uux and specifying an alternate configuration file with the --config option.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ian lance taylor taylor uucp | = 1.0.6 | No fix listed |
References
- CLA-2001:425 patch vendor-advisory
- 20011130 Redhat 7.0 local root (via uucp) (attempt 2) mailing-list
- RHSA-2001:165 vendor-advisory
- CSSA-2001-033.0 patch vendor-advisory
- DSA-079 vendor-advisory
- SuSE-SA:2001:38 vendor-advisory
- 20010908 Multiple vendor 'Taylor UUCP' problems. exploit mailing-list vendor-advisory
- 3312 exploit patch vdb-entry vendor-advisory
- uucp-argument-gain-privileges(7099) vdb-entry