CVE-2001-0366

CVE-2001-0366 describes a local privilege escalation vulnerability in saposcol, a component of SAP R/3 Web Application Server Demo before version 1.5. The software insecurely trusts the PATH environment variable to locate and execute the 'expand' program. This allows a local attacker to gain root access by manipulating their PATH to point to a malicious 'expand' executable. The vulnerability has a CVSS score of 7.2 (High), indicating a low attack complexity and complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this older vulnerability.