CVE-2000-1009

This exploit leverages a vulnerability in dump/restore utilities (CVE-2000-1009) where the TAPE environment variable is improperly handled, allowing execution of arbitrary commands with elevated privileges. It creates a malicious script and executes it via the vulnerable binary to gain a SUID root shell.

This exploit leverages a vulnerability in the `dump` command (version 0.4b15) on Red Hat 6.2, where improper handling of the `TAPE` and `RSH` environment variables allows execution of arbitrary commands with root privileges. The script creates a malicious `/tmp/rsh` script that copies `/bin/sh` to `/tmp/sush` and sets the SUID bit, enabling a root shell.