CVE-2001-0872 Privilege escalation in n/a

What is CVE-2001-0872?

CVE-2001-0872 is a high-severity vulnerability in OpenSSH, published on 25 Jun 2002. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

OpenSSH 3.0.1 and earlier with UseLogin enabled does not properly cleanse critical environment variables such as LD_PRELOAD, which allows local users to gain root privileges.

Which versions are affected by CVE-2001-0872?

It affects 3 products.

Products include OpenSSH, Redhat Linux, Suse Suse Linux.

How do I fix CVE-2001-0872?

No fix has been published for CVE-2001-0872 yet. Limit exposure of the affected software until one is available.

Is CVE-2001-0872 being exploited?

There is no known exploitation of CVE-2001-0872 in the wild and no public exploit code.

Other vulnerabilities in OpenSSH

• CVE-2003-0786 Auth bypass in n/a Critical 10.0
• CVE-2003-0693 Memory corruption in n/a Critical 10.0
• CVE-2002-0640 Memory corruption in n/a Critical 10.0
• CVE-2001-0144 Integer overflow in n/a Critical 10.0
• CVE-2000-0999 Memory corruption in n/a Critical 10.0

All OpenSSH vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-65cx-7mf4-2jgg.