Back to Database
Status published
Medium
CVE-2000-1163
ghostscript before 5.10-16 uses an empty LD_RUN_PATH environmental variable to...
Vulnerability Description
ghostscript before 5.10-16 uses an empty LD_RUN_PATH environmental variable to find libraries in the current directory, which could allow local users to execute commands as other users by placing a Trojan horse library into a directory from which another user executes ghostscript.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2000-1163
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.calderasystems.com/support/security/advisories/CSSA-2000-041.0.txt
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5564
- http://www.linux-mandrake.com/en/security/MDKSA-2000-074.php3
- http://www.securityfocus.com/bid/1991
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000343
- http://www.debian.org/security/2000/20001123
More from aladdin enterprises
View All →CVE-2004-0967
The (1) pj-gs.sh, (2) ps2epsi, (3) pv.sh, and (4) sysvlp.sh...
High
7.2
CVE-2002-0363
ghostscript before 6.53 allows attackers to execute arbitrary commands by...
High
7.5
CVE-2001-1353
ghostscript before 6.51 allows local users to read and write...
Low
2.6
CVE-2000-1162
ghostscript before 5.10-16 allows local users to overwrite files of...
Low
3.7
CVE-1999-0155
The ghostscript command with the -dSAFER option allows remote attackers...
High
7.5
Affected Vendor
aladdin enterprises
View all reports →Affected Software
ghostscript
Vulnerable Versions:
4.3, 5.10.10, 5.10.15, 5.10cl, 5.50
Timeline
Official Publish:
January 22nd, 2001
Last Modified:
August 8th, 2024
Added to House:
July 17th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.