CVE-2000-1103: bsdi bsd_os
Vulnerability summary
CVE-2000-1103 is a high (CVSS 7.2) vulnerability in bsdi bsd_os. EPSS estimates a 0.94% chance of exploitation in the next 30 days, higher than 60.2% of scored vulnerabilities. 3 public exploits are recorded.
Timeline
- 19-12-2000PublishedVulnerability first disclosed.
- 08-08-2024Last modifiedVulnerability information updated.
Description
rcvtty in BSD 3.0 and 4.0 does not properly drop privileges before executing a script, which allows local attackers to gain privileges by specifying an alternate Trojan horse script on the command line.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
0.94%
Chance of exploitation in the next 30 days
Percentile
60%
Versus all other CVEs
30-day change
0.00 pp
From 0.94% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
3 foundExploit Reference (securityfocus.com)
Maturity: unknown
Exploit Reference (securityfocus.com)
Maturity: unknown
BSDi 3.0/4.0 - 'rcvtty[mh]' Local Privilege Escalation
Maturity: weaponized
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Bsdi1 product
- bsd_os3.0 | 3.1 | 4.0 | 4.0.1
1 vendor · 1 product