Lucene search
MitreCVE-2000-0786HistoryOct 20, 2000 - 4:00 a.m.
CVE-2000-0786
2000-10-2004:00:00
mitre
web.nvd.nist.gov
24
gnu userv 1.0.0
cve-2000-0786
file descriptor swapping
access restrictions
nvd.
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.7
Confidence
Low
EPSS
0
Percentile
5.1%
GNU userv 1.0.0 and earlier does not properly perform file descriptor swapping, which can corrupt the USERV_GROUPS and USERV_GIDS environmental variables and allow local users to bypass some access restrictions.
Affected configurations
Node
gnuuservMatch1.0.0
CVSS2
4.6
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.7
Confidence
Low
EPSS
0
Percentile
5.1%
Related for CVE-2000-0786