What’s Vulnerable › Vulnerabilities

CVE-2000-1009

• Severity: high (CVSS 7.2 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2000-12-11 · updated 2026-06-16

Description

dump in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modifying the RSH variable to point to a Trojan horse program.

Affected products

• RedHat Linux: 6.2
• Trustix Secure Linux: 1.1

References

• http://archives.neohapsis.com/archives/bugtraq/2000-10/0438.html
• http://www.securityfocus.com/bid/1871
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5437
• http://archives.neohapsis.com/archives/bugtraq/2000-10/0438.html
• http://www.securityfocus.com/bid/1871
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5437

Get alerted when CVE-2000-1009 or the next vulnerability affects your stack