CVE-2000-0094: High severity NetBSD NetBSD vulnerability
procfs in BSD systems allows local users to gain root privileges by modifying the /proc/pid/mem interface via a modified file descriptor for stderr.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable or unmount procfs so that /proc/pid/mem is not accessible. Do not mount procfs on systems where it is not required.
procfs (BSD) mount/enable = disabled - Compensating control
Restrict access to /proc (procfs) to trusted administrative users only and limit local user privileges to prevent unprivileged users from manipulating file descriptors (such as stderr) of other processes.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0094?
CVE-2000-0094 has a high severity rating due to the potential for local users to gain root privileges.
How do I fix CVE-2000-0094?
To fix CVE-2000-0094, restrict access to the /proc/pid/mem interface or upgrade to a patched version of the operating system.
Who is affected by CVE-2000-0094?
CVE-2000-0094 affects users of NetBSD 1.4.1 and potentially other BSD systems that utilize procfs.
What causes CVE-2000-0094?
CVE-2000-0094 is caused by a flaw in procfs that allows local users to manipulate memory mappings via stderr.
Is CVE-2000-0094 exploitable remotely?
CVE-2000-0094 is not exploitable remotely, as it requires local user access to the system.