Lucene search
HistoryJul 12, 2000 - 4:00 a.m.
CVE-2000-0195
cve-2000-0195
corel linux
root access
local users
setxconf
gain access
.xserverrc file
nvd
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.9 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
9.8%
setxconf in Corel Linux allows local users to gain root access via the -T parameter, which executes the user’s .xserverrc file.
Affected configurations
Node
corellinuxMatch1.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| corel:linux | corel linux | eq | 1.0 |
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.9 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
9.8%
Related for CVE-2000-0195