PT-2000-1010 · Red Hat · Tmpwatch

Publicado 2000-11-08 · Atualizado 2017-10-10 · CVE-2000-0829

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Red Hat Linux tmpwatch version 2.6.2

Description The issue concerns the tmpwatch utility in Red Hat Linux, which can be exploited locally to cause a denial of service. This can happen when a local user creates deeply nested directories in /tmp or /var/tmp/, causing the utility to fork a new process for each directory level.

Recommendations For Red Hat Linux tmpwatch version 2.6.2, consider restricting access to the /tmp and /var/tmp directories to prevent local users from creating deeply nested directories until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

BDU:2015-07927

CVE-2000-0829

Produtos afetados

Tmpwatch

Referências · 8

• 🔥 https://exploit-db.com/exploits/20217 · Exploit
• 🔥 http://securityfocus.com/bid/1664 · Exploit
• https://bdu.fstec.ru/vul/2015-07927 · Nota de Segurança
• https://rhn.redhat.com/errata/RHSA-2000-080.html · Nota
• http://securityfocus.com/archive/1/81364 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2000-0829 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5217 · Nota
• http://redhat.com/support/errata/RHSA-2000-080.html · Nota