Lucene search
MitreCVE-2000-0959HistoryJan 22, 2001 - 5:00 a.m.
CVE-2000-0959
2001-01-2205:00:00
mitre
web.nvd.nist.gov
25
cve-2000-0959
glibc2
setuid programs
local users
symlink attack
file overwriting
nvd
CVSS2
1.2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:H/Au:N/C:N/I:P/A:N
AI Score
6.3
Confidence
High
EPSS
0
Percentile
5.1%
glibc2 does not properly clear the LD_DEBUG_OUTPUT and LD_DEBUG environmental variables when a program is spawned from a setuid program, which could allow local users to overwrite files via a symlink attack.
Affected configurations
Node
gnuglibcMatch2.1.3.10
Related
cert
cert
Debian glibc 2 symlink issue could allow arbitrary file overwriting
2001-07-24 00:00:00
nvd
nvd
CVE-2000-0959
2000-12-19 05:00:00
cvelist
cvelist
CVE-2000-0959
2001-01-22 05:00:00
CVSS2
1.2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:H/Au:N/C:N/I:P/A:N
AI Score
6.3
Confidence
High
EPSS
0
Percentile
5.1%
Related for CVE-2000-0959