{"id":"CVE-2000-1125","aliases":["EUVD-2000-1110","GHSA-5v9r-wpqf-v2w9"],"status":"published","title":"restore 0.4b15 and earlier in Red Hat Linux 6.2 trusts the pathname specified by the RSH...","description":"restore 0.4b15 and earlier in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modifying the RSH variable to point to a Trojan horse program.","severity":{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01107,"percentile":0.66064,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2000-12-19T05:00:00Z","modified":"2026-06-16T21:53:12Z","exploits":[{"source":"exploitdb","id":"EDB-182","title":"RedHat 6.2 - '/sbin/restore' Local Privilege Escalation","type":"local","platform":"linux","date":"2000-11-16","verified":true,"url":"https://www.exploit-db.com/exploits/182"},{"source":"exploitdb","id":"EDB-184","title":"RedHat 6.2 Restore and Dump - Local Privilege Escalation","type":"local","platform":"linux","date":"2000-11-16","verified":true,"url":"https://www.exploit-db.com/exploits/184"},{"source":"exploitdb","id":"EDB-20385","title":"RedHat 0.4 b15 restore - Insecure Environment Variables","type":"local","platform":"linux","date":"2000-11-04","verified":true,"url":"https://www.exploit-db.com/exploits/20385"}],"products":[{"vendor":"redhat","product":"linux"}],"references":[{"url":"http://www.securityfocus.com/bid/1914","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq\u0026m=97336034309944\u0026w=2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2000-1125"},{"url":"https://github.com/advisories/GHSA-5v9r-wpqf-v2w9"}],"sources":{"cve":[{"id":"CVE-2000-1125","description":"restore 0.4b15 and earlier in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modifying the RSH variable to point to a Trojan horse program.","status":"published","published":"2000-12-19T05:00:00Z","modified":"2024-08-08T05:45:37.323Z","updated_at":"2026-11-02T14:33:40.909668Z"}],"euvd":[{"id":"EUVD-2000-1110","description":"restore 0.4b15 and earlier in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modifying the RSH variable to point to a Trojan horse program.","status":"published","published":"2000-12-19T05:00:00Z","modified":"2024-08-08T05:45:37Z","updated_at":"2026-11-03T00:56:22.50224Z"}],"ghsa":[{"id":"GHSA-5v9r-wpqf-v2w9","title":"restore 0.4b15 and earlier in Red Hat Linux 6.2 trusts the pathname specified by the RSH...","description":"restore 0.4b15 and earlier in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modifying the RSH variable to point to a Trojan horse program.","status":"published","published":"2022-04-30T18:14:57Z","modified":"2023-01-30T05:05:20Z","updated_at":"2026-11-02T14:47:14.859967Z"}],"nvd":[{"id":"CVE-2000-1125","description":"restore 0.4b15 and earlier in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modifying the RSH variable to point to a Trojan horse program.","status":"published","published":"2001-01-09T05:00:00Z","modified":"2026-06-16T21:53:12.12Z","cvss":[{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:00:39.593487Z"}]}}