ikeyman in IBM IBMHSSSB 1.0 sets the CLASSPATH environmental variable to include the user's own CLASSPATH directories before the system's directories, which allows a malicious local user to execute arbitrary code as root via a Trojan horse Ikeyman class.
References
Link | Resource |
---|---|
http://www.securityfocus.com/archive/1/54073 | Exploit Vendor Advisory |
http://www.securityfocus.com/bid/1092 | Exploit Patch Vendor Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/4235 | |
http://www.securityfocus.com/archive/1/54073 | Exploit Vendor Advisory |
http://www.securityfocus.com/bid/1092 | Exploit Patch Vendor Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/4235 |
Configurations
History
03 Apr 2025, 01:03
Type | Values Removed | Values Added |
---|---|---|
References | () http://www.securityfocus.com/archive/1/54073 - Exploit, Vendor Advisory | |
References | () http://www.securityfocus.com/bid/1092 - Exploit, Patch, Vendor Advisory | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/4235 - |
Information
Published : 2001-08-31 04:00
Updated : 2025-04-03 01:03
NVD link : CVE-2000-1202
Mitre link : CVE-2000-1202
CVE.ORG link : CVE-2000-1202
JSON object : View
Products Affected
ibm
- http_server_ssl_module_common
CWE