Lucene search

[email protected]CVE-2000-0293

HistoryMay 02, 2000 - 4:00 a.m.

CVE-2000-0293

2000-05-0204:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

suse linux

6.3

aaa_base

cron.daily

file deletion

cve-2000-0293

nvd

7.2 High

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

0.4%

JSON

aaa_base in SuSE Linux 6.3, and cron.daily in earlier versions, allow local users to delete arbitrary files by creating files whose names include spaces, which are then incorrectly interpreted by aaa_base when it deletes expired files from the /tmp directory.

CPENameOperatorVersion
suse:suse_linuxsuse suse linuxeq6.2
suse:suse_linuxsuse suse linuxeq6.3
suse:suse_linuxsuse suse linuxeq6.0
suse:suse_linuxsuse suse linuxeq6.1
suse:suse_linuxsuse suse linuxeq6.4

CPE	Name	Operator	Version
suse:suse_linux	suse suse linux	eq	6.2
suse:suse_linux	suse suse linux	eq	6.3
suse:suse_linux	suse suse linux	eq	6.0
suse:suse_linux	suse suse linux	eq	6.1
suse:suse_linux	suse suse linux	eq	6.4

References

www.securityfocus.com/bid/1130

7.2 High

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

0.4%

JSON

Related for CVE-2000-0293

cvelist1