CVE-2000-1124

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

Buffer overflow in piobe command in IBM AIX 4.3.x allows local users to gain privileges via long environmental variables.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Jan 9, 2001
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-11257.2restore 0.4b15 and earlier in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users toCVE-2000-112610.0Vulnerability in auto_parms and set_parms in HP-UX 11.00 and earlier allows remote attackers to execute arbitrary commands or cause a denialCVE-2000-11273.6registrar in the HP resource monitor service allows local users to read and modify arbitrary files by renaming the original registrar.log loCVE-2000-11284.6The default configuration of McAfee VirusScan 4.5 does not quote the ImagePath variable, which improperly sets the search path and allows loCVE-2000-11295.0McAfee WebShield SMTP 4.5 allows remote attackers to cause a denial of service via a malformed recipient field.CVE-2000-11307.5McAfee WebShield SMTP 4.5 allows remote attackers to bypass email content filtering rules by including Extended ASCII characters in name of CVE-2000-11317.5Bill Kendrick web site guestbook (GBook) allows remote attackers to execute arbitrary commands via shell metacharacters in the _MAILTO form CVE-2000-11326.4DCForum cgforum.cgi CGI script allows remote attackers to read arbitrary files, and delete the program itself, via a malformed "forum" variaCVE-2000-11335.0Authentix Authentix100 allows remote attackers to bypass authentication by inserting a . (dot) into the URL for a protected directory.CVE-2000-11347.2Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when processing << redirCVE-2000-11354.6fshd (fsh daemon) in Debian GNU/Linux allows local users to overwrite files of other users via a symlink attack.CVE-2000-11364.6elvis-tiny before 1.4-10 in Debian GNU/Linux, and possibly other Linux operating systems, allows local users to overwrite files of other use
CVE-2000-1124: High severity, CVSS 7.2 | Vulnix