Lucene search

[email protected]CVE-2000-0231

HistoryMar 16, 2000 - 5:00 a.m.

CVE-2000-0231

2000-03-1605:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2000-0231

linux kreatecd

user-path trust

root privileges

security flaw

nvd.

7.4 High

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

0.4%

JSON

Linux kreatecd trusts a user-supplied path that is used to find the cdrecord program, allowing local users to gain root privileges.

CPENameOperatorVersion
suse:suse_linuxsuse suse linuxeq6.2
suse:suse_linuxsuse suse linuxeq6.0
suse:suse_linuxsuse suse linuxeq6.1
halloween:halloween_linuxhalloween halloween linuxeq4.0
suse:suse_linuxsuse suse linuxeq6.3

CPE	Name	Operator	Version
suse:suse_linux	suse suse linux	eq	6.2
suse:suse_linux	suse suse linux	eq	6.0
suse:suse_linux	suse suse linux	eq	6.1
halloween:halloween_linux	halloween halloween linux	eq	4.0
suse:suse_linux	suse suse linux	eq	6.3

References

archives.neohapsis.com/archives/bugtraq/2000-03/0162.html

www.securityfocus.com/bid/1061

7.4 High

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

0.4%

JSON

Related for CVE-2000-0231

cvelist1