Vulnerabilities > CVE-2001-0855 - Buffer Overflow vulnerability in Rational ClearCase DB Loader TERM Environment Variable

047910
CVSS 7.2 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
local
low complexity
rational-software
exploit available

Summary

Buffer overflow in db_loader in ClearCase 4.2 and earlier allows local users to gain root privileges via a long TERM environment variable.

Exploit-Db

descriptionRational ClearCase 3.2/4.x DB Loader TERM Environment Variable Buffer Overflow Vulnerability. CVE-2001-0855. Local exploit for unix platform
idEDB-ID:21150
last seen2016-02-02
modified2001-11-09
published2001-11-09
reportervirtualcat
sourcehttps://www.exploit-db.com/download/21150/
titleRational ClearCase 3.2/4.x DB Loader TERM Environment Variable Buffer Overflow Vulnerability