CVE-2001-0087

Published: 12/02/2001 Updated: 19/12/2017

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

VMScore: 725

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

itetris/xitetris 1.6.2 and previous versions trusts the PATH environmental variable to find and execute the gunzip program, which allows local users to gain root privileges by changing their PATH so that it points to a malicious gunzip program.

Vulnerable Product	Search on Vulmon	Subscribe to Product
michael glickman itetris 1.6.1
michael glickman itetris 1.6.2

source: wwwsecurityfocuscom/bid/2139/info Itetris, or "Intelligent Tetris", is a clone of the popular Tetris puzzle game for linux systems The svgalib version of Itetris is installed setuid root so that it may access video hardware when run by a regular user Itetris contains a vulnerability which may allow unprivileged users to execute ...

NVD-CWE-Other http://www.securityfocus.com/bid/2139 http://archives.neohapsis.com/archives/bugtraq/2000-12/0295.html https://exchange.xforce.ibmcloud.com/vulnerabilities/5795 https://nvd.nist.gov https://www.exploit-db.com/exploits/20517/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2001-0087

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect