Lucene search

[email protected]CVE-2000-0722

HistoryOct 20, 2000 - 4:00 a.m.

CVE-2000-0722

2000-10-2004:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

gnome updater

helix-update

arbitrary rpm packages

local users

cve-2000-0722.

7.2 High

AI Score

Confidence

Low

6.2 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.3%

JSON

Helix GNOME Updater helix-update 0.5 and earlier allows local users to install arbitrary RPM packages by creating the /tmp/helix-install installation directory before root has begun installing packages.

CPENameOperatorVersion
helix_code:gnome_updaterhelix code gnome updatereq0.4
helix_code:gnome_updaterhelix code gnome updatereq0.3
helix_code:gnome_updaterhelix code gnome updatereq0.1
helix_code:gnome_updaterhelix code gnome updatereq0.2
helix_code:gnome_updaterhelix code gnome updatereq0.5

CPE	Name	Operator	Version
helix_code:gnome_updater	helix code gnome updater	eq	0.4
helix_code:gnome_updater	helix code gnome updater	eq	0.3
helix_code:gnome_updater	helix code gnome updater	eq	0.1
helix_code:gnome_updater	helix code gnome updater	eq	0.2
helix_code:gnome_updater	helix code gnome updater	eq	0.5

References

archives.neohapsis.com/archives/bugtraq/2000-08/0240.html

archives.neohapsis.com/archives/bugtraq/2000-08/0251.html

www.securityfocus.com/bid/1593

www.securityfocus.com/templates/archive.pike?list=1&msg=E13QAYl-0007il-00%40the-village.bc.nu

7.2 High

AI Score

Confidence

Low

6.2 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.3%

JSON