CVE-2000-0537
BRU - Arbitrary File Write via BRUEXECLOG Environment Variable
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2000-0537. PoCs published by Riley Hassell.
AI-analyzed exploit summary This exploit leverages an environment variable manipulation vulnerability in BRU (Backup and Restore Utility) to overwrite arbitrary files, including /etc/passwd, allowing local privilege escalation to root. The PoC demonstrates creating a root shell entry in the passwd file.
Description
BRU backup software allows local users to append data to arbitrary files by specifying an alternate configuration file with the BRUEXECLOG environmental variable.
Exploits (1)
This exploit leverages an environment variable manipulation vulnerability in BRU (Backup and Restore Utility) to overwrite arbitrary files, including /etc/passwd, allowing local privilege escalation to root. The PoC demonstrates creating a root shell entry in the passwd file.