CVE-2001-0873

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2001-12-21 · updated 2026-06-16

Description

uuxqt in Taylor UUCP package does not properly remove dangerous long options, which allows local users to gain privileges by calling uux and specifying an alternate configuration file with the --config option.

Affected products

Ian Lance Taylor Taylor Uucp: 1.0.6

References

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000425
http://marc.info/?l=bugtraq&m=100715446131820
http://rhn.redhat.com/errata/RHSA-2001-165.html
http://www.calderasystems.com/support/security/advisories/CSSA-2001-033.0.txt
http://www.debian.org/security/2001/dsa-079
http://www.novell.com/linux/security/advisories/2001_038_uucp_txt.html
http://www.securityfocus.com/archive/1/212892
http://www.securityfocus.com/bid/3312
https://exchange.xforce.ibmcloud.com/vulnerabilities/7099
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000425
http://marc.info/?l=bugtraq&m=100715446131820
http://rhn.redhat.com/errata/RHSA-2001-165.html

Get alerted when CVE-2001-0873 or the next vulnerability affects your stack