| Vulnerability Name: | CVE-2000-0703 (CCN-5047) | ||||||||
| Assigned: | 2000-08-07 | ||||||||
| Published: | 2000-08-07 | ||||||||
| Updated: | 2008-09-10 | ||||||||
| Summary: | suidperl (aka sperl) does not properly cleanse the escape sequence "~!" before calling /bin/mail to send an error report, which allows local users to gain privileges by setting the "interactive" environmental variable and calling suidperl with a filename that contains the escape sequence. | ||||||||
| CVSS v3 Severity: | 9.3 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
| ||||||||
| CVSS v2 Severity: | 7.2 High (CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C)
| ||||||||
| Vulnerability Type: | CWE-Other | ||||||||
| References: | Source: CCN Type: Caldera International, Inc. Security Advisory CSSA-2000-026.0 sperl vulnerability Source: BUGTRAQ Type: Exploit, Vendor Advisory 20000805 sperl 5.00503 (and newer ;) exploit Source: CCN Type: BugTraq Mailing List, Sat Aug 05 2000 - 11:39:22 CDT sperl 5.00503 (and newer ;) exploit Source: BUGTRAQ Type: UNKNOWN 20000808 MDKSA-2000:031 perl update Source: BUGTRAQ Type: UNKNOWN 20000810 Conectiva Linux security announcemente - PERL Source: CCN Type: Conectiva Linux Announcement CLSA-2000:255 perl: Local root exploit Source: BUGTRAQ Type: UNKNOWN 20000814 Trustix Security Advisory - perl and mailx Source: CCN Type: BugTraq Mailing List, Mon Aug 14 2000 - 07:56:43 CDT Trustix Security Advisory - perl and mailx Source: MITRE Type: CNA CVE-2000-0703 Source: CCN Type: RHSA-2000:048-06 Updated mailx and perl packages are now available Source: CALDERA Type: Patch, Vendor Advisory CSSA-2000-026.0 Source: DEBIAN Type: Debian Security Advisory 20000810 New version of mailx released Source: CCN Type: TurboLinux Security Announcement TLSA2000018-1 perl-5.00503 and earlier Source: SUSE Type: UNKNOWN 20000810 Security Hole in perl, all versions Source: CCN Type: OSVDB ID: 1494 Perl suidperl mail Error Report Shell Escape Arbitrary Command Execution Source: REDHAT Type: UNKNOWN RHSA-2000:048 Source: BID Type: Exploit, Patch, Vendor Advisory 1547 Source: CCN Type: BID-1547 SuidPerl Mail Shell Escape Vulnerability Source: CCN Type: SuSE Security Announcement #59 perl, all versions Source: TURBO Type: UNKNOWN TLSA2000018-1 Source: CCN Type: MandrakeSoft Security Advisory MDKSA-2000:031 perl Source: XF Type: UNKNOWN perl-shell-escape(5047) | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||