CVE-2000-0029: Medium severity SCO UnixWare vulnerability
UnixWare pis and mkpis commands allow local users to gain privileges via a symlink attack.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Xinuos UnixWare pis and mkpisfrom your environment.If pis and mkpis are not required on a system, uninstall or remove these binaries to eliminate the attack surface until an upstream fix is provided.
- Configuration
Remove the SUID bit from the pis and mkpis binaries and restrict execution so only root can run them (for example, ensure owner is root and set permissions such that non-root users cannot execute). Keep this change in place until a vendor patch is available.
Xinuos UnixWare (pis and mkpis binaries) file permissions / SUID = remove SUID bit; restrict execution to root - Compensating control
Restrict which local user accounts can log in or run administrative commands (use local ACLs, sudoers configuration, or host-based controls) and isolate systems where possible to reduce risk from local attackers until a vendor fix is available.
- Operational
Search for signs of local privilege escalation (e.g., unexpected root processes or modified sensitive files). If compromise is suspected, perform incident response actions such as containment and credential rotation before restoring normal operation.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0029?
CVE-2000-0029 is considered a local privilege escalation vulnerability.
How do I fix CVE-2000-0029?
To fix CVE-2000-0029, users should apply patches provided by the vendor for UnixWare 7.1.
Who is affected by CVE-2000-0029?
CVE-2000-0029 affects local users of SCO UnixWare 7.1 who can leverage the vulnerable pis and mkpis commands.
What type of attack is associated with CVE-2000-0029?
CVE-2000-0029 is associated with a symlink attack allowing local users to gain elevated privileges.
Are there any workarounds for CVE-2000-0029?
As a workaround for CVE-2000-0029, limit access to the pis and mkpis commands to trusted users only.