CVE-2000-1125
restore 0.4b15 and earlier in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modifying the RSH variable to point to a Trojan horse program.
Key facts
- CVSS score
- 7.2 (v2.0)
- Severity
- HIGH
- CVSS vector
AV:L/AC:L/Au:N/C:C/I:C/A:C- EPSS score
- 1.1% (65th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2000-1110)
- Published
- January 9, 2001
- NVD last modified
- June 16, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2000-1110 in the EU Vulnerability Database. Last updated in EUVD on August 8, 2024.
View on the EU Vulnerability DatabaseAffected products
- redhat / linux
- redhat / linux
Certified products that may be affected
10 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.
- Red Hat Enterprise Linux on 32 bit x86 Architecture, Version 6.2 - Red Hat, Inc. - Common Criteria BSI-DSZ-CC-0924-2014 - archived
- Red Hat Enterprise Linux 6.2 dm-crypt Cryptographic Module - Red Hat®, Inc. - FIPS 140 1933 - historical
- Red Hat Enterprise Linux 6.2 Kernel Crypto API Cryptographic Module - Red Hat®, Inc. - FIPS 140 1901 - historical
- Red Hat Enterprise Linux 6.2 Openswan Cryptographic Module - Red Hat®, Inc. - FIPS 140 1859 - historical
- Red Hat Enterprise Linux Version 6.2 with KVM Virtualization for x86 Architectures - Red Hat, Inc. - Common Criteria BSI-DSZ-CC-0754-2012 - archived
See all 10 in the Security Certifications Explorer.
References
- http://marc.info/?l=bugtraq&m=97336034309944&w=2
- http://www.securityfocus.com/bid/1914(Exploit, Vendor Advisory)
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain