CVE-2000-1009
dump in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which...
dump in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modifying the RSH variable to point to a Trojan horse program.
Exploit likelihood
What each source reports
NVD Score used
dump in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modifying the RSH variable to point to a Trojan horse program.
- Record
CVE-2000-1009- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
dump in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modifying the RSH variable to point to a Trojan horse program.
- Record
CVE-2000-1009- Updated
- 2026-11-02
EUVDEUVD-2000-0996 No score
dump in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modifying the RSH variable to point to a Trojan horse program.
- Record
EUVD-2000-0996- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jph8-qvmw-2p95 No score
dump in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which...
dump in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modifying the RSH variable to point to a Trojan horse program.
- Record
GHSA-jph8-qvmw-2p95- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | dump 0.4b15 - Local Privilege Escalation | 2000-11-19 |
| Exploit-DB | dump 0.4b15 (RedHat 6.2) - Local Privilege Escalation | 2000-11-29 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2000-1009 is a high vulnerability (CVSS 7.2) in Redhat Linux, published November 29, 2000. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.15%, the 66th percentile. No source names a fixed version.