CVE-2000-1207 describes a critical vulnerability in the userhelper program within the usermode package on Red Hat Linux. This flaw allows userhelper to execute non-setuid programs as root, bypassing glibc's security measures and enabling exploitation via format string vulnerabilities in glibc through the LANG or LC_ALL environment variables. With a CVSS score of 7.2 (High), this vulnerability presents a significant risk, allowing local attackers to achieve full compromise of confidentiality, integrity, and availability with low attack complexity. Despite its age and high severity, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
All Versions ImpactedCPE matchmatch criteria | cpe:2.3:o:redhat:linux:*:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:L/AC:L/Au:N/C:C/I:C/A:C
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.5 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.