Privilege Escalation via rcvtty in BSD 3.0 and 4.0

CVE-2000-1103 · HIGH Severity

AV:L/AC:L/AU:N/C:C/I:C/A:C

rcvtty in BSD 3.0 and 4.0 does not properly drop privileges before executing a script, which allows local attackers to gain privileges by specifying an alternate Trojan horse script on the command line.

Learn more about our Web Application Penetration Testing UK.