CVE-2000-1009: dump in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows loc...

Security readout for executives and security teams

On Red Hat Linux 6.2, the dump backup utility trusts the RSH environment variable to locate a helper program. Because dump runs with elevated privileges, a local user who is already logged in can point RSH at a program they control and have it run as root. This is a local privilege escalation issue affecting an end-of-life operating system from 2000. Exposure is limited to systems still running Red Hat Linux 6.2 (or derivatives) with the vulnerable dump package installed setuid and shell access granted to untrusted users. That platform reached end-of-life long ago, so modern estates should have essentially zero exposure outside of legacy or embedded appliances. Low priority for modern environments; treat as high priority only if legacy Red Hat Linux 6.2 systems remain in service. Fold remediation into existing legacy-OS retirement or isolation programs rather than a standalone response effort. Mitigation focus: Retire or upgrade any Red Hat Linux 6.2 host; the platform is end-of-life and unsupported.; Consult vendor guidance for the current dump package and apply available updates.; Remove the setuid bit from dump where the backup workflow does not require it..

Prepared

Jul 12, 2026, 00:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.