PT-2000-1004 · Red Hat · Red Hat

Published 2000-12-13 · Updated 2017-10-10 · CVE-2000-1189

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Red Hat Linux versions 6.x through 7.x

Description The issue is related to a buffer overflow in the pam localuser PAM module, which can be exploited by attackers to gain privileges. This can lead to a violation of confidentiality, integrity, and availability of protected information. The exploitation of this issue can be performed locally.

Recommendations For Red Hat Linux versions 6.x through 7.x, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

BDU:2015-07821

CVE-2000-1189

Affected Products

Red Hat

References · 7

• http://redhat.com/support/errata/RHSA-2000-120.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2000-1189 · Security Note
• https://bdu.fstec.ru/vul/2015-07821 · Security Note
• https://rhn.redhat.com/errata/RHSA-2000-120.html · Note
• http://linux-mandrake.com/en/security/MDKSA-2000-082.php3 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5747 · Note
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000358 · Note