CVE-2000-1119

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

Buffer overflow in setsenv command in IBM AIX 4.3.x and earlier allows local users to execute arbitrary commands via a long "x=" argument.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Jan 9, 2001
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-11207.2Buffer overflow in digest command in IBM AIX 4.3.x and earlier allows local users to execute arbitrary commands.CVE-2000-11217.2Buffer overflow in enq command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands via a long -M argument.CVE-2000-11227.2Buffer overflow in setclock command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands via a long argument.CVE-2000-11237.2Buffer overflow in pioout command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands.CVE-2000-11247.2Buffer overflow in piobe command in IBM AIX 4.3.x allows local users to gain privileges via long environmental variables.CVE-2000-11257.2restore 0.4b15 and earlier in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users toCVE-2000-112610.0Vulnerability in auto_parms and set_parms in HP-UX 11.00 and earlier allows remote attackers to execute arbitrary commands or cause a denialCVE-2000-11273.6registrar in the HP resource monitor service allows local users to read and modify arbitrary files by renaming the original registrar.log loCVE-2000-11284.6The default configuration of McAfee VirusScan 4.5 does not quote the ImagePath variable, which improperly sets the search path and allows loCVE-2000-11295.0McAfee WebShield SMTP 4.5 allows remote attackers to cause a denial of service via a malformed recipient field.CVE-2000-11307.5McAfee WebShield SMTP 4.5 allows remote attackers to bypass email content filtering rules by including Extended ASCII characters in name of CVE-2000-11317.5Bill Kendrick web site guestbook (GBook) allows remote attackers to execute arbitrary commands via shell metacharacters in the _MAILTO form
CVE-2000-1119: Medium severity, CVSS 4.6 | Vulnix