CVE-2001-0873

Published: Dec 21, 2001Modified: Apr 16, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

uuxqt in Taylor UUCP package does not properly remove dangerous long options, which allows local users to gain privileges by calling uux and specifying an alternate configuration file with the --config option.

Affected (1)

Products: Ian Lance Taylor: Taylor Uucp

Ian Lance Taylor

1 product

Taylor Uucp

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ian Lance Taylor Taylor Uucp	Version 1.0.6

References (18)

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000425

Source: cve@mitre.org

PatchVendor Advisory

http://marc.info/?l=bugtraq&m=100715446131820

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2001-165.html

Source: cve@mitre.org

http://www.calderasystems.com/support/security/advisories/CSSA-2001-033.0.txt

Source: cve@mitre.org

PatchVendor Advisory

http://www.debian.org/security/2001/dsa-079

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2001_038_uucp_txt.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/212892

Source: cve@mitre.org

ExploitVendor Advisory

http://www.securityfocus.com/bid/3312

Source: cve@mitre.org

ExploitPatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/7099

Source: cve@mitre.org

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000425