PT-2000-1444 · Linux · Linux

Published 2000-06-09 · Updated 2008-09-10 · CVE-2000-0506

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux versions prior to 2.2.16

Description The issue concerns the "capabilities" feature in Linux, which allows local users to cause a denial of service or gain privileges. This is achieved by setting the capabilities to prevent a setuid program from dropping privileges.

Recommendations For Linux versions prior to 2.2.16, update to version 2.2.16 or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2000-0506

Affected Products

Linux

References · 10

• 🔥 https://exploit-db.com/exploits/20000 · Exploit
• 🔥 https://exploit-db.com/exploits/20001 · Exploit
• 🔥 http://securityfocus.com/templates/archive.pike?list=1&msg=[e-mail] · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0506 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2000-06/0063.html · Note
• http://redhat.com/support/errata/RHSA-2000-037.html · Note
• http://securityfocus.com/bid/1322 · Note
• ftp://sgigate.sgi.com/security/20000802-01-P · Note
• http://securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.21.0006090852340.3475-300000%40alfa.elzabsoft.pl · Note
• http://archives.neohapsis.com/archives/bugtraq/2000-06/0062.html · Note