CVE-2001-0087

published 2001-02-12

CVE-2001-0087: itetris/xitetris 1.6.2 and earlier trusts the PATH environmental variable to find and execute the gunzip program, which allows local users to gain root…

Priority P4 22 high 7.2 CVSS 2.0

AV L AC L Au N C C I C A C

EXPLOIT

itetris/xitetris 1.6.2 and earlier trusts the PATH environmental variable to find and execute the gunzip program, which allows local users to gain root privileges by changing their PATH so that it points to a malicious gunzip program.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
michael_glickman	itetris	—	—
michael_glickman	itetris	—	—

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.