Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2000-1095

6 documents6 sources
Severity
7.2HIGH
EPSS
0.2%
top 56.44%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
5
Conectiva LinuxImmunix ImmunixMandrakesoft Mandrake Linux+2 more
Timeline
PublishedJan 9
Latest updateApr 30

Description

modprobe in the modutils 2.3.x package on Linux systems allows a local user to execute arbitrary commands via shell metacharacters.

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages5 packages

▶NVDredhat/linux7.0
▶NVDsuse/suse_linux6.4, 7.0+1
▶NVDimmunix/immunix6.2, 7.0_beta+1

Patches

Patch: www.redhat.com ↗Patch: www.securityfocus.com ↗Patch: www.redhat.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-7753-m7xj-hvxr: modprobe in the modutils 2↗2022-04-30
▶
CVEList
CVE-2000-1095: modprobe in the modutils 2↗2001-01-22
▶

💥Exploits & PoCs

1
Exploit-DB
Linux modutils 2.3.9 - 'modprobe' Arbitrary Command Execution↗2000-11-12
▶

📋Vendor Advisories

1
Red Hat
security flaw↗2000-11-12
▶

💬Community

1
Bugzilla
CVE-2000-1095 security flaw↗2018-08-16
▶