CVE-2000-0824 describes a vulnerability in glibc 2.1.1 where the unsetenv function fails to properly unset environmental variables if they are duplicated. This flaw allows local users to execute arbitrary commands within setuid programs by manipulating environmental variables like LD_PRELOAD or LD_LIBRARY_PATH. The vulnerability carries a CVSS score of 7.2 (HIGH), indicating a local attack vector with low complexity, leading to complete compromise of confidentiality, integrity, and availability. Its FAUCET Risk Score is 86/100, highlighting its significant potential impact. Despite its severity, there is no evidence of active exploitation (KEV: No), nor are there publicly available Metasploit or Nuclei exploits. While one ExploitDB entry mentions a related ProFTPd vulnerability, it doesn't directly detail an exploit for CVE-2000-0824, and community discussion and media coverage are absent.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2.1.1CPE matchmatch criteria | cpe:2.3:a:gnu:glibc:2.1.1:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:L/AC:L/Au:N/C:C/I:C/A:C
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.5 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.