CVE-2000-0048: High severity corel linux vulnerability

Affected Software

Remediation

Recommended actions to resolve this vulnerability, in priority order.

1. Remove

   Remove Corel Linux get_it from your environment.

   If the get_it program is not required, uninstall or remove it from systems to eliminate the vulnerable component.

2. Configuration

   Modify the get_it program (or the wrapper that invokes it) so that it calls cp with its absolute path (for example /bin/cp) and/or explicitly resets/sanitizes the PATH to a safe value before invoking external commands to prevent attacker-controlled PATH entries from being used.

   get_it (Corel Linux Update) cp invocation / PATH handling = invoke cp by absolute path and/or sanitize PATH before use
3. Configuration

   Change file permissions or ACLs so that only root or trusted administrator accounts can execute get_it; remove execute permission for regular unprivileged users to prevent local users from exploiting the program.

   get_it (Corel Linux Update) executable access = restrict execution to trusted accounts
4. Compensating control

   Until a code fix is available, prevent exploitation by restricting local user ability to modify PATH or place malicious binaries in directories that could be used in PATH (e.g., disallow writing to /usr/bin, /bin, or other standard locations) and ensure user shells/configurations do not export attacker-controlled PATH values when invoking privileged tools.

Event History

Frequently Asked Questions