PT-2000-1010 · Red Hat · Tmpwatch

Published 2000-11-08 · Updated 2017-10-10 · CVE-2000-0829

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Red Hat Linux tmpwatch version 2.6.2

Description The issue concerns the tmpwatch utility in Red Hat Linux, which can be exploited locally to cause a denial of service. This can happen when a local user creates deeply nested directories in /tmp or /var/tmp/, causing the utility to fork a new process for each directory level.

Recommendations For Red Hat Linux tmpwatch version 2.6.2, consider restricting access to the /tmp and /var/tmp directories to prevent local users from creating deeply nested directories until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

BDU:2015-07927

CVE-2000-0829

Affected Products

Tmpwatch

References · 8

• 🔥 https://exploit-db.com/exploits/20217 · Exploit
• 🔥 http://securityfocus.com/bid/1664 · Exploit
• https://bdu.fstec.ru/vul/2015-07927 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2000-0829 · Security Note
• https://rhn.redhat.com/errata/RHSA-2000-080.html · Note
• http://securityfocus.com/archive/1/81364 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5217 · Note
• http://redhat.com/support/errata/RHSA-2000-080.html · Note