PT-2000-1174 · Caldera · Caldera Openlinux
Published
2000-03-05
·
Updated
2008-09-10
·
CVE-2000-0192
CVSS v2.0
5.0
Medium
| Vector | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Caldera OpenLinux version 2.3
Description
The default installation of Caldera OpenLinux includes the CGI program rpm query, which allows remote attackers to determine what packages are installed on the system.
Recommendations
For Caldera OpenLinux version 2.3, consider disabling or restricting access to the rpm query CGI program to minimize the risk of exploitation.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Caldera Openlinux