CVE-2000-1163

ghostscript before 5.10-16 uses an empty LD_RUN_PATH environmental variable to find libraries in the current directory, which could allow local users to execute commands as other users by placing a Trojan horse library into a directory from which another user executes ghostscript.

• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000343
• http://www.calderasystems.com/support/security/advisories/CSSA-2000-041.0.txt
• http://www.debian.org/security/2000/20001123Patch, Vendor Advisory
• http://www.linux-mandrake.com/en/security/MDKSA-2000-074.php3
• http://www.securityfocus.com/bid/1991Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5564
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000343
• http://www.calderasystems.com/support/security/advisories/CSSA-2000-041.0.txt
• http://www.debian.org/security/2000/20001123Patch, Vendor Advisory
• http://www.linux-mandrake.com/en/security/MDKSA-2000-074.php3
• http://www.securityfocus.com/bid/1991Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5564

Published

Jan 9, 2001

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2000-1157Buffer overflow in NAI Sniffer Agent allows remote attackers…
• CVE-2000-1158NAI Sniffer Agent uses base64 encoding for authentication, w…
• CVE-2000-1159NAI Sniffer Agent allows remote attackers to gain privileges…
• CVE-2000-1160NAI Sniffer Agent allows remote attackers to cause a denial …
• CVE-2000-1161The installation of AdCycle banner management system leaves …
• CVE-2000-1162ghostscript before 5.10-16 allows local users to overwrite f…
• CVE-2000-1164WinVNC installs the WinVNC3 registry key with permissions th…
• CVE-2000-1165Balabit syslog-ng allows remote attackers to cause a denial …
• CVE-2000-1166Twig webmail system does not properly set the "vhosts" varia…
• CVE-2000-1167ppp utility in FreeBSD 4.1.1 and earlier does not properly r…
• CVE-2000-1168IBM HTTP Server 1.3.6 (based on Apache) allows remote attack…
• CVE-2000-1169OpenSSH SSH client before 2.3.0 does not properly disable X1…