Lucene search

[email protected]CVE-2000-0506

HistoryOct 13, 2000 - 4:00 a.m.

CVE-2000-0506

2000-10-1304:00:00

[email protected]

web.nvd.nist.gov

cve-2000-0506

linux vulnerability

dos

gain privileges

setuid/setcap vulnerability

kernel issue

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.8 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.6%

JSON

The “capabilities” feature in Linux before 2.2.16 allows local users to cause a denial of service or gain privileges by setting the capabilities to prevent a setuid program from dropping privileges, aka the “Linux kernel setuid/setcap vulnerability.”

Affected configurations

NVD

Node

linuxlinux_kernelMatch2.0

linuxlinux_kernelMatch2.0.30

linuxlinux_kernelMatch2.0.33

linuxlinux_kernelMatch2.0.34

linuxlinux_kernelMatch2.0.35

linuxlinux_kernelMatch2.0.36

linuxlinux_kernelMatch2.0.37

linuxlinux_kernelMatch2.0.38

linuxlinux_kernelMatch2.1

linuxlinux_kernelMatch2.2.0

linuxlinux_kernelMatch2.2.10

linuxlinux_kernelMatch2.2.12

linuxlinux_kernelMatch2.2.13

linuxlinux_kernelMatch2.2.14

linuxlinux_kernelMatch2.2.15

linuxlinux_kernelMatch2.2.15pre16

linuxlinux_kernelMatch2.2.15_pre20

linuxlinux_kernelMatch2.2.16

linuxlinux_kernelMatch2.2.16pre5

CPENameOperatorVersion
linux:linux_kernellinux linux kerneleq2.0
linux:linux_kernellinux linux kerneleq2.0.30
linux:linux_kernellinux linux kerneleq2.0.33
linux:linux_kernellinux linux kerneleq2.0.34
linux:linux_kernellinux linux kerneleq2.0.35
linux:linux_kernellinux linux kerneleq2.0.36
linux:linux_kernellinux linux kerneleq2.0.37
linux:linux_kernellinux linux kerneleq2.0.38
linux:linux_kernellinux linux kerneleq2.1
linux:linux_kernellinux linux kerneleq2.2.0

CPE	Name	Operator	Version
linux:linux_kernel	linux linux kernel	eq	2.0
linux:linux_kernel	linux linux kernel	eq	2.0.30
linux:linux_kernel	linux linux kernel	eq	2.0.33
linux:linux_kernel	linux linux kernel	eq	2.0.34
linux:linux_kernel	linux linux kernel	eq	2.0.35
linux:linux_kernel	linux linux kernel	eq	2.0.36
linux:linux_kernel	linux linux kernel	eq	2.0.37
linux:linux_kernel	linux linux kernel	eq	2.0.38
linux:linux_kernel	linux linux kernel	eq	2.1
linux:linux_kernel	linux linux kernel	eq	2.2.0

Rows per page:

1-10 of 171

References

ftp://sgigate.sgi.com/security/20000802-01-P

archives.neohapsis.com/archives/bugtraq/2000-06/0062.html

archives.neohapsis.com/archives/bugtraq/2000-06/0063.html

www.redhat.com/support/errata/RHSA-2000-037.html

www.securityfocus.com/bid/1322

www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.21.0006090852340.3475-300000%40alfa.elzabsoft.pl

Social References

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.8 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.6%

JSON

Related for CVE-2000-0506

cvelist1 nvd1