CVE-2000-0816

Linux tmpwatch - Command Injection

Title source: llm

Description

Linux tmpwatch --fuser option allows local users to execute arbitrary commands by creating files whose names contain shell metacharacters.

Exploits (1)

exploitdb WORKING POC VERIFIED

by X-Force · clocallinux

https://www.exploit-db.com/exploits/20285

View Code ZIP pw:eip

References (5)

[Various Sources] http://www.linux-mandrake.com/en/security/MDKSA-2000-056.php3?dis=7.1

[Vendor Advisory] http://www.redhat.com/support/errata/RHSA-2000-080.html

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/5320

[Vendor Advisory] http://xforce.iss.net/alerts/advise64.php

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/1785

Scores

EPSS 0.0022

EPSS Percentile 44.1%

Details

Status published

Products (2)

redhat/linux 6.2 (3 CPE variants)

redhat/linux 7.0

Published Oct 06, 2000

Tracked Since Feb 18, 2026