CVE-2000-0055: Buffer Overflow
Buffer overflow in Solaris chkperm command allows local users to gain root access via a long -n option.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Solaris chkpermfrom your environment.Remove, uninstall, or rename the chkperm binary to prevent its execution if it is not required, until an official fix is applied.
- Configuration
Restrict execution of the chkperm command to root-only (change ownership/permissions so non-root users cannot execute) until a vendor patch is available.
Solaris chkperm executable_permissions = root-only - Compensating control
Apply host-based access controls to prevent untrusted local users from executing chkperm or from obtaining shells (for example, restrict local account creation, restrict login access, or apply local ACLs) until a patch is available.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0055?
CVE-2000-0055 is considered critical due to its potential for local users to gain root access.
How do I fix CVE-2000-0055?
To fix CVE-2000-0055, you should apply the patches provided by Oracle for the affected Solaris versions.
What versions of Solaris are affected by CVE-2000-0055?
CVE-2000-0055 affects Solaris versions 2.4, 2.5, 2.6 and SunOS versions 5.3, 5.4, 5.5, 5.5.1, and 5.7.
Can CVE-2000-0055 be exploited remotely?
CVE-2000-0055 cannot be exploited remotely as it requires local user access to trigger the buffer overflow.
What does the -n option in Solaris chkperm command do related to CVE-2000-0055?
The -n option in the Solaris chkperm command allows users to specify a username, but can be exploited if excessively long input is provided.