peter bassill · operator
$ cve CVE-2000-0824 JSON

CVE-2000-0824 EXPLOIT

7.2
HIGH · CVSS 2.0 · EPSS 1.2% (pctl 68)

Patch early

A public exploit exists.

Description

The unsetenv function in glibc 2.1.1 does not properly unset an environmental variable if the variable is provided twice to a program, which could allow local users to execute arbitrary commands in setuid programs by specifying their own duplicate environmental variables such as LD_PRELOAD or LD_LIBRARY_PATH.

Scoring

CVSS7.2 (HIGH, v2.0)
VectorAV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS1.23% — more likely to be exploited than 68% of all CVEs
On CISA KEVno
Public exploityes
Published2000-11-14
Last modified2026-06-16

Affected (1)

VendorProduct
gnuglibc

Public exploits

SourceTitleDate
exploit-dbProFTPd 1.2 pre6 - 'snprintf' Remote Root1999-09-17

References

→ the Explorer  ·  watch your stack  ·  NVD