Unscored CVE-2001-1091 EUVD-2001-1072GHSA-5pgj-xv2m-m63j

The (1) dump and (2) dump_lfs commands in NetBSD 1.4.x through 1.5.1 do not properly drop privileges, which could allow local users to gain…

Published Mar 15, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

The (1) dump and (2) dump_lfs commands in NetBSD 1.4.x through 1.5.1 do not properly drop privileges, which could allow local users to gain privileges via the RCMD_CMD environment variable.

References

bsd-dump-tty-privileges(7037) vdb-entry