peter bassill · operator
$ cve CVE-2000-1119 JSON

CVE-2000-1119 EXPLOIT

4.6
MEDIUM · CVSS 2.0 · EPSS 1% (pctl 61)

Patch early

A public exploit exists.

Description

Buffer overflow in setsenv command in IBM AIX 4.3.x and earlier allows local users to execute arbitrary commands via a long "x=" argument.

Scoring

CVSS4.6 (MEDIUM, v2.0)
VectorAV:L/AC:L/Au:N/C:P/I:P/A:P
EPSS0.98% — more likely to be exploited than 61% of all CVEs
On CISA KEVno
Public exploityes
Published2001-01-09
Last modified2026-06-16

Affected (1)

VendorProduct
ibmaix

Public exploits

SourceTitleDate
exploit-dbIBM AIX 4.x - '/usr/bin/setsenv' Local Buffer Overflow2000-12-01

References

→ the Explorer  ·  watch your stack  ·  NVD