CVE-2000-0052: High severity redhat Linux vulnerability

Published Jan 4, 2000

Updated

Red Hat userhelper program in the usermode package allows local users to gain root access via PAM and a .. (dot dot) attack.

Affected Software

8 affected components

redhat Linux=6.0

Turbolinux Turbolinux=4.4

Turbolinux Turbolinux=4.2

Turbolinux Turbolinux=6.0.2

Mandrakesoft Mandrake Linux=6.0

redhat Linux=6.1

Turbolinux Turbolinux=3.5b2

Mandrakesoft Mandrake Linux=6.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Remove
Remove usermode/userhelper from your environment.
Uninstall or remove the userhelper program (part of the usermode package) from affected systems (Mandrake Linux, Red Hat Linux, Turbolinux) until a vendor-supplied patch or update is available.

Event History

Jan 4, 2000

CVE Published

05:00 AM

Data Sourced

via NVD·05:00 AM

DescriptionSeverityAffected Software

Apr 18, 2000

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2000-0052?

CVE-2000-0052 is considered a high-severity vulnerability as it allows local users to gain root access.

How do I fix CVE-2000-0052?

To fix CVE-2000-0052, update the usermode package to the latest version provided by your distribution.

Which operating systems are affected by CVE-2000-0052?

CVE-2000-0052 affects Red Hat Linux versions 6.0 and 6.1, as well as Mandrake and Turbolinux versions mentioned in the vulnerability details.

What type of attack is associated with CVE-2000-0052?

CVE-2000-0052 involves a 'dot dot' attack that exploits improper handling of file paths in the userhelper program.

Is CVE-2000-0052 likely to be exploited in a typical environment?

Yes, since it allows privilege escalation, CVE-2000-0052 could be exploited by local attackers in a vulnerable environment.