CVE-2000-1202
Last modified
CVE-2000-1202 is a vulnerability of currently unknown severity. ikeyman in IBM IBMHSSSB 1.0 sets the CLASSPATH environmental variable to include the user's own CLASSPATH directories before the system's directories, which allows a malicious local user to execute arbitrary code as root via a Trojan horse Ikeyman class.. EPSS estimates a 0.58% chance of exploitation in the next 30 days.
Description
ikeyman in IBM IBMHSSSB 1.0 sets the CLASSPATH environmental variable to include the user's own CLASSPATH directories before the system's directories, which allows a malicious local user to execute arbitrary code as root via a Trojan horse Ikeyman class.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Http Server Ssl Module Common | 1.0 |
References
- http://www.securityfocus.com/archive/1/54073Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/1092Exploit, Patch, Vendor Advisory
- http://www.securityfocus.com/archive/1/54073Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/1092Exploit, Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2000-1202?
How severe is CVE-2000-1202?
How do I fix CVE-2000-1202?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2000
- CVE-2000-1196PSCOErrPage.htm in Netscape PublishingXpert 2.5 before SP2 a…
- CVE-2000-1197POP2 or POP3 server (pop3d) in imap-uw IMAP package on FreeB…
- CVE-2000-1198qpopper POP server creates lock files with predictable names…5.5
- CVE-2000-1199PostgreSQL stores usernames and passwords in plaintext in (1…
- CVE-2000-1200Windows NT allows remote attackers to list all users in a do…
- CVE-2000-1201Check Point FireWall-1 allows remote attackers to cause a de…
- CVE-2000-1203Lotus Domino SMTP server 4.63 through 5.08 allows remote att…
- CVE-2000-1204Vulnerability in the mod_vhost_alias virtual hosting module …
- CVE-2000-1205Cross site scripting vulnerabilities in Apache 1.3.0 through…
- CVE-2000-1206Vulnerability in Apache httpd before 1.3.11, when configured…
- CVE-2000-1207userhelper in the usermode package on Red Hat Linux executes…
- CVE-2000-1208Format string vulnerability in startprinting() function of p…
Are you affected by CVE-2000-1202?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
