CVE-2000-0703

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

suidperl (aka sperl) does not properly cleanse the escape sequence "~!" before calling /bin/mail to send an error report, which allows local users to gain privileges by setting the "interactive" environmental variable and calling suidperl with a filename that contains the escape sequence.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published
Oct 20, 2000
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-070410.0Buffer overflow in SGI Omron WorldView Wnn allows remote attackers to execute arbitrary commands via long JS_OPEN, JS_MKDIR, or JS_FILE_INFOCVE-2000-07055.0ntop running in web mode allows remote attackers to read arbitrary files via a .. (dot dot) attack.CVE-2000-070610.0Buffer overflows in ntop running in web mode allows remote attackers to execute arbitrary commands.CVE-2000-07077.5PCCS MySQLDatabase Admin Tool Manager 1.2.4 and earlier installs the file dbconnect.inc within the web root, which allows remote attackers tCVE-2000-07085.0Buffer overflow in Pragma Systems TelnetServer 2000 version 4.0 allows remote attackers to cause a denial of service via a long series of nuCVE-2000-07095.0The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to cause a denial of service in some compoCVE-2000-07105.0The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to determine the physical path of the servCVE-2000-07117.5Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which allows remote attackerCVE-2000-07127.2Linux Intrusion Detection System (LIDS) 0.9.7 allows local users to gain root privileges when LIDS is disabled via the security=0 boot optioCVE-2000-07137.6Buffer overflow in Adobe Acrobat 4.05, Reader, Business Tools, and Fill In products that handle PDF files allows attackers to execute arbitrCVE-2000-07147.2umb-scheme 3.2-11 for Red Hat Linux is installed with world-writeable files.CVE-2000-07152.1DiskCheck script diskcheck.pl in Red Hat Linux 6.2 allows local users to create or overwrite arbitrary files via a symlink attack on a tempo
CVE-2000-0703: High severity, CVSS 7.2 | Vulnix