VULNERABILITY INTELLIGENCE
CVE-2001-1091
CVSS score7.2 HIGH
EPSS probability0.33%
CISA KEVNot currently listed
Published2001-08-23
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C
Description
The (1) dump and (2) dump_lfs commands in NetBSD 1.4.x through 1.5.1 do not properly drop privileges, which could allow local users to gain privileges via the RCMD_CMD environment variable.