CVE Catalog

CVE-2000-0072

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.34%

25th percentile - higher than 25% of all known CVEs

Summary

Visual Casel (Vcasel) does not properly prevent users from executing files, allowing local users to use a relative pathname to specify an alternate file with an approved name, potentially gaining privileges.

Risk Assessment

Local users may exploit this vulnerability to gain unauthorized privileges, posing a threat to system integrity.

Recommendation

It is recommended to implement appropriate access control mechanisms and monitor executed files to minimize risk.

Original NVD description (English source)

Visual Casel (Vcasel) does not properly prevent users from executing files, which allows local users to use a relative pathname to specify an alternate file which has an approved name and possibly gain privileges.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS