Lucene search

[email protected]CVE-2000-0052

HistoryApr 18, 2000 - 4:00 a.m.

CVE-2000-0052

2000-04-1804:00:00

[email protected]

web.nvd.nist.gov

cve-2000-0052

red hat

userhelper

root access

pam

dot dot attack

nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

0.4%

JSON

Red Hat userhelper program in the usermode package allows local users to gain root access via PAM and a … (dot dot) attack.

Affected configurations

NVD

Node

mandrakesoftmandrake_linuxMatch6.0

mandrakesoftmandrake_linuxMatch6.1

redhatlinuxMatch6.0i386

redhatlinuxMatch6.1i386

turbolinuxturbolinuxMatch3.5b2

turbolinuxturbolinuxMatch4.2

turbolinuxturbolinuxMatch4.4

turbolinuxturbolinuxMatch6.0.2

CPENameOperatorVersion
mandrakesoft:mandrake_linuxmandrakesoft mandrake linuxeq6.0
mandrakesoft:mandrake_linuxmandrakesoft mandrake linuxeq6.1
redhat:linuxredhat linuxeq6.0
redhat:linuxredhat linuxeq6.1
turbolinux:turbolinuxturbolinuxeq3.5b2
turbolinux:turbolinuxturbolinuxeq4.2
turbolinux:turbolinuxturbolinuxeq4.4
turbolinux:turbolinuxturbolinuxeq6.0.2

CPE	Name	Operator	Version
mandrakesoft:mandrake_linux	mandrakesoft mandrake linux	eq	6.0
mandrakesoft:mandrake_linux	mandrakesoft mandrake linux	eq	6.1
redhat:linux	redhat linux	eq	6.0
redhat:linux	redhat linux	eq	6.1
turbolinux:turbolinux	turbolinux	eq	3.5b2
turbolinux:turbolinux	turbolinux	eq	4.2
turbolinux:turbolinux	turbolinux	eq	4.4
turbolinux:turbolinux	turbolinux	eq	6.0.2

References

www.l0pht.com/advisories/pam_advisory

www.redhat.com/support/errata/RHSA-2000-001.html

www.securityfocus.com/bid/913

xforce.iss.net/search.php3?type=2&pattern=linux-pam-userhelper

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

0.4%

JSON

Related for CVE-2000-0052

nvd1 cvelist1