Lucene search
HistoryMay 02, 2000 - 4:00 a.m.
CVE-2000-0293
suse linux
6.3
aaa_base
cron.daily
file deletion
cve-2000-0293
nvd
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
6.8 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
0.4%
aaa_base in SuSE Linux 6.3, and cron.daily in earlier versions, allow local users to delete arbitrary files by creating files whose names include spaces, which are then incorrectly interpreted by aaa_base when it deletes expired files from the /tmp directory.
Affected configurations
Node
susesuse_linuxMatch6.0
ORsusesuse_linuxMatch6.1
ORsusesuse_linuxMatch6.1alpha
ORsusesuse_linuxMatch6.2
ORsusesuse_linuxMatch6.3
ORsusesuse_linuxMatch6.3ppc
ORsusesuse_linuxMatch6.3alpha
ORsusesuse_linuxMatch6.4
References
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
6.8 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
0.4%
Related for CVE-2000-0293