Lucene search
HistoryJun 02, 2000 - 4:00 a.m.
CVE-2000-0229
cve-2000-0229
gpm package
privilege escalation
nvd
local users
security vulnerability
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.5 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
0.4%
gpm-root in the gpm package does not properly drop privileges, which allows local users to gain privileges by starting a utility from gpm-root.
Affected configurations
Node
alessandro_rubinigpmMatch1.18.1
ORalessandro_rubinigpmMatch1.19
ORdebiandebian_linuxMatch2.0
ORdebiandebian_linuxMatch2.1
ORdebiandebian_linuxMatch2.2
ORdebiandebian_linuxMatch2.2pre_potato
ORredhatlinuxMatch6.0i386
ORredhatlinuxMatch6.1i386
ORredhatlinuxMatch6.2i386
ORsusesuse_linuxMatch5.3
ORsusesuse_linuxMatch6.0
ORsusesuse_linuxMatch6.1
ORsusesuse_linuxMatch6.2
ORsusesuse_linuxMatch6.3
Related
cert
cert
gpm-root fails to correctly release GID 0 membership for user defined menus
2001-05-21 00:00:00
nessus
nessus
Mandrake Linux Security Advisory : gpm (MDKSA-2000:002)
2012-09-06 00:00:00
cvelist
cvelist
CVE-2000-0229
2000-06-02 04:00:00
nvd
nvd
CVE-2000-0229
2000-03-22 05:00:00
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.5 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
0.4%
Related for CVE-2000-0229