CVE-2000-0092: Medium severity NetBSD NetBSD vulnerability
The BSD make program allows local users to modify files via a symlink attack when the -j option is being used.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Avoid using the make -j option (parallel builds) until vendors provide fixes. Run make without -j to prevent the symlink-based modification attack.
BSD make -j (parallel jobs) = disabled / do not use
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0092?
CVE-2000-0092 is considered to have a medium severity level due to the potential for local file modification.
How do I fix CVE-2000-0092?
To address CVE-2000-0092, users should avoid using the -j option with the BSD make program or ensure that the files involved are not vulnerable to symlink attacks.
Which operating systems are affected by CVE-2000-0092?
CVE-2000-0092 affects FreeBSD 3.4, NetBSD 1.4.1, and OpenBSD 2.6.
What type of attack does CVE-2000-0092 involve?
CVE-2000-0092 involves a symlink attack that allows local users to modify files.
Who is at risk for CVE-2000-0092?
Local users on the affected operating systems are at risk for exploiting CVE-2000-0092.