CVE-2000-0009: High severity Nortel Optivity Net Architect vulnerability
The bnapass program in Optivity NETarchitect uses the PATH environmental variable for finding the "rm" program, which allows local users to execute arbitrary commands.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Modify the bna_pass binary or its startup/wrapper so that it invokes the rm program by absolute path (for example /bin/rm) instead of locating it via the PATH environment variable. Alternatively, ensure the process explicitly sets a safe PATH before executing external commands.
bna_pass (Nortel Optivity Net Architect) invocation of rm / reliance on PATH = invoke rm using an absolute path (e.g. /bin/rm) or avoid using PATH to locate rm - Configuration
Ensure the PATH seen by bna_pass contains only trusted system directories and does not include directories writable by local/unprivileged users. Achieve this by hardcoding PATH in the service startup, wrapper script, or adjusting system/service unit files.
environment / PATH used by bna_pass PATH = trusted directories only (e.g. /bin:/usr/bin) and no directories writable by unprivileged users - Compensating control
Prevent unprivileged users from placing executables in directories contained in PATH (adjust filesystem permissions) and restrict which users can execute or access bna_pass (local account restrictions, file permission hardening) to reduce the ability to exploit PATH-based execution.
- Operational
Search the system PATH for unauthorized or suspicious 'rm' binaries placed by local users, remove any untrusted copies, and audit the system for signs of compromise resulting from this issue; remediate any detected malicious activity.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0009?
CVE-2000-0009 has a high severity level due to its potential for local users to execute arbitrary commands.
How do I fix CVE-2000-0009?
To fix CVE-2000-0009, ensure that the PATH variable is not used to locate the 'rm' program by modifying the bna_pass program accordingly.
What impact does CVE-2000-0009 have on system security?
CVE-2000-0009 can lead to unauthorized command execution, compromising the integrity and confidentiality of the system.
Which software versions are affected by CVE-2000-0009?
CVE-2000-0009 specifically affects version 2.0 of Nortel Optivity Net Architect.
Who can exploit CVE-2000-0009?
Local users with access to the Optivity Net Architect application can exploit CVE-2000-0009.