← Database

CVE-2001-1091

HIGH CVSS: 7.2 Published: 2001-08-23 Modified: 2026-06-16

Description

The (1) dump and (2) dump_lfs commands in NetBSD 1.4.x through 1.5.1 do not properly drop privileges, which could allow local users to gain privileges via the RCMD_CMD environment variable.

Affected Platforms

Netbsd Netbsd

Weakness Type

NVD-CWE-Other

References