PT-2000-1177 · Corel · Corel Linux

Publicado 2000-02-24 · Atualizado 2008-09-10 · CVE-2000-0195

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Corel Linux (affected versions not specified)

Description The issue allows local users to gain root access. This is achieved through the setxconf utility, which executes the user's .xserverrc file when the -T parameter is used.

Recommendations For Corel Linux, consider restricting access to the setxconf utility and the .xserverrc file to minimize the risk of exploitation. As a temporary workaround, avoid using the -T parameter in setxconf until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2000-0195

Produtos afetados

Corel Linux

Referências · 4

• 🔥 https://exploit-db.com/exploits/19765 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0195 · Nota de Segurança
• http://securityfocus.com/bid/1008 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2000-02/0323.html · Nota