CVE-2001-0366

saposcol in SAP R/3 Web Application Server Demo before 1.5 trusts the PATH environmental variable to find and execute the expand program, which allows local…

published March 9, 2002

CVSS
—
EPSS
1%
Percentile
45.4
In the wild
Unconfirmed
What it is

saposcol in SAP R/3 Web Application Server Demo before 1.5 trusts the PATH environmental variable to find and execute the expand program, which allows local users to obtain root access by modifying the PATH to point to a Trojan horse expand program.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00557 · 45.4th percentile
Published
2002-03-09T05:00Z
EPSS history
Timeline
  • 09 MAR 05:00Z
    saposcol in SAP R/3 Web Application Server Demo before 1.5 trusts the PATH environmental variable to find and execute the expand program, which allows local…
    cvelistv5