Lucene search

[email protected]CVE-2000-0231

HistoryJun 02, 2000 - 4:00 a.m.

CVE-2000-0231

2000-06-0204:00:00

[email protected]

web.nvd.nist.gov

cve-2000-0231

linux kreatecd

user-path trust

root privileges

security flaw

nvd.

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

0.4%

JSON

Linux kreatecd trusts a user-supplied path that is used to find the cdrecord program, allowing local users to gain root privileges.

Affected configurations

NVD

Node

halloweenhalloween_linuxMatch4.0

susesuse_linuxMatch6.0

susesuse_linuxMatch6.1

susesuse_linuxMatch6.2

susesuse_linuxMatch6.3

CPENameOperatorVersion
halloween:halloween_linuxhalloween halloween linuxeq4.0
suse:suse_linuxsuse suse linuxeq6.0
suse:suse_linuxsuse suse linuxeq6.1
suse:suse_linuxsuse suse linuxeq6.2
suse:suse_linuxsuse suse linuxeq6.3

CPE	Name	Operator	Version
halloween:halloween_linux	halloween halloween linux	eq	4.0
suse:suse_linux	suse suse linux	eq	6.0
suse:suse_linux	suse suse linux	eq	6.1
suse:suse_linux	suse suse linux	eq	6.2
suse:suse_linux	suse suse linux	eq	6.3

References

archives.neohapsis.com/archives/bugtraq/2000-03/0162.html

www.securityfocus.com/bid/1061

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

0.4%

JSON

Related for CVE-2000-0231

cvelist1 nvd1