PT-2000-1177 · Corel · Corel Linux

Published 2000-02-24 · Updated 2008-09-10 · CVE-2000-0195

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Corel Linux (affected versions not specified)

Description The issue allows local users to gain root access. This is achieved through the setxconf utility, which executes the user's .xserverrc file when the -T parameter is used.

Recommendations For Corel Linux, consider restricting access to the setxconf utility and the .xserverrc file to minimize the risk of exploitation. As a temporary workaround, avoid using the -T parameter in setxconf until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2000-0195

Affected Products

Corel Linux

References · 4

• 🔥 https://exploit-db.com/exploits/19765 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0195 · Security Note
• http://securityfocus.com/bid/1008 · Note
• http://archives.neohapsis.com/archives/bugtraq/2000-02/0323.html · Note