CVE-2000-0107: High severity Debian Debian Linux vulnerability
Linux apcd program allows local attackers to modify arbitrary files via a symlink attack.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
apcdfrom your environment.Uninstall the apcd program from affected Debian systems if it is not required.
- Compensating control
Restrict local untrusted user access on systems with apcd installed (remove or disable unnecessary local accounts, tighten filesystem permissions and local ACLs) to prevent local users from exploiting symlink attacks against apcd.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0107?
CVE-2000-0107 is considered a medium severity vulnerability due to its potential for local attackers to exploit symlink attacks.
How do I fix CVE-2000-0107?
To fix CVE-2000-0107, ensure that the apcd program is updated to a version that is not vulnerable to symlink attacks.
Who is impacted by CVE-2000-0107?
CVE-2000-0107 affects users of Debian GNU/Linux 2.1 and potentially other Linux distributions using the vulnerable apcd program.
What is a symlink attack in the context of CVE-2000-0107?
A symlink attack involves manipulating symbolic links to trick programs into accessing or modifying unintended files.
Is there a way to mitigate CVE-2000-0107 without updating?
Mitigation of CVE-2000-0107 can be achieved by implementing strict file permission settings to limit access to sensitive files.