CVE-2000-0076: Low severity Berkeley Nvi vulnerability

Affected Software

Remediation

Recommended actions to resolve this vulnerability, in priority order.

1. Remove

   Remove debian/nvi from your environment.

   Uninstall the nvi package from affected Debian systems if nviboot functionality is not required.

2. Configuration

   Disable nviboot so it is not run at boot (remove/disable the nviboot init/systemd script). For Debian systems, remove the nviboot boot script from init/systemd startup to prevent it from processing vi.recover entries.

   nviboot boot script (Debian nvi package) enabled = false
3. Configuration

   Restrict ownership and file permissions for vi.recover so local non-privileged users cannot modify it (make it owned by root and writable only by root).

   vi.recover permissions = restrict write to root only
4. Compensating control

   Limit local user accounts and privileges on systems with the vulnerable nviboot script; apply filesystem ACLs or host-level controls to prevent untrusted local users from accessing or modifying vi.recover or boot scripts.

5. Operational

   Inspect logs and file system integrity for unexpected deletions attributable to malformed vi.recover entries, restore any deleted files from backups, and remediate affected systems after disabling/removing nviboot.

Event History

Frequently Asked Questions