PT-2001-1180 · Recourse · Recourse Mantrap
Published
2001-01-09
·
Updated
2017-10-10
·
CVE-2000-1144
CVSS v2.0
2.1
Low
| Vector | AV:L/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Recourse ManTrap version 1.6
Description
The issue allows attackers to determine that they are in a chroot environment due to the higher than normal inode number for the resulting "/" file system. This is because Recourse ManTrap sets up a chroot environment to hide the fact that it is running.
Recommendations
For Recourse ManTrap version 1.6, consider modifying the setup of the chroot environment to mask the inode number of the "/" file system, or apply additional measures to prevent attackers from detecting the chroot environment.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Recourse Mantrap