Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2000-1103

5 documents4 sources
Severity
7.2HIGH
EPSS
0.3%
top 45.23%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Bsdi BSD OS
Timeline
PublishedJan 9
Latest updateApr 30

Description

rcvtty in BSD 3.0 and 4.0 does not properly drop privileges before executing a script, which allows local attackers to gain privileges by specifying an alternate Trojan horse script on the command line.

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages1 packages

▶NVDbsdi/bsd_os4 versions+3

🔴Vulnerability Details

2
GHSA
GHSA-x37q-rf4q-x5w3: rcvtty in BSD 3↗2022-04-30
▶
CVEList
CVE-2000-1103: rcvtty in BSD 3↗2000-12-19
▶

💥Exploits & PoCs

2
Exploit-DB
BSDi 3.0/4.0 - 'rcvtty[mh]' Local Privilege Escalation↗2000-11-21
▶
Exploit-DB
AVM KEN! 1.3.10/1.4.30 - Remote Denial of Service↗2000-04-12
▶
CVE-2000-1103 (HIGH CVSS 7.2) | rcvtty in BSD 3.0 and 4.0 does not | cvebase.io