Unscored CVE-2000-1202 EUVD-2000-1187GHSA-92vr-7cqw-xc63

ikeyman in IBM IBMHSSSB 1.0 sets the CLASSPATH environmental variable to include the user's own CLASSPATH directories before the system's d…

Published Sep 12, 2001 · Updated Aug 8, 2024 · Assigned by mitre

Description

ikeyman in IBM IBMHSSSB 1.0 sets the CLASSPATH environmental variable to include the user's own CLASSPATH directories before the system's directories, which allows a malicious local user to execute arbitrary code as root via a Trojan horse Ikeyman class.

References

1092 vdb-entry
ibm-ikeyman(4235) vdb-entry
20000405 minor issue with IBM HTTPD and /usr/bin/ikeyman mailing-list