CVE-2000-0722

The CVE-2000-0722 entry concerns Helix GNOME Updater (helix-update) version 0.5 and earlier. It describes a local-privilege issue where an attacker can cause the installation of arbitrary RPM packages by pre-creating the /tmp/helix-install directory before the package installation sequence begins...

CVE-2000-0723: Undefined Security Weakness

Helix GNOME Updater helix-update 0.5 and earlier does not properly create /tmp directories, which allows local users to create empty system configuration files such as /etc/config.d/bashrc, /etc/config.d/csh.cshrc, and /etc/rc.config...

CVE-2000-0722: Undefined Security Weakness

Helix GNOME Updater helix-update 0.5 and earlier allows local users to install arbitrary RPM packages by creating the /tmp/helix-install installation directory before root has begun installing packages...