CVE-2001-1091

HIGH · CVSS 7.2 EPSS 0.33%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2001-08-23 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2001-1091

Severity

HIGH

CVSS

7.2

EPSS

0.33%

Original NVD Description

The (1) dump and (2) dump_lfs commands in NetBSD 1.4.x through 1.5.1 do not properly drop privileges, which could allow local users to gain privileges via the RCMD_CMD environment variable.