CVE-2000-0145: High severity Debian Debian Linux vulnerability
The libguile.so library file used by gnucash in Debian GNU/Linux is installed with world-writable permissions.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Remove the world-writable permission bits from the libguile.so library installed by gnucash (for example, run: chmod o-w /path/to/libguile.so). Ensure the file is owned by the appropriate privileged user/group and that write access is limited to administrators. Verify package reinstalls do not restore insecure permissions and fix packaging if necessary.
Debian GNU/Linux - gnucash libguile.so file_permissions = remove world-writable
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0145?
CVE-2000-0145 is considered a moderate severity vulnerability due to the world-writable permissions of the libguile.so library.
How do I fix CVE-2000-0145?
To fix CVE-2000-0145, modify the permissions of the libguile.so library to remove world-writable access.
Which systems are affected by CVE-2000-0145?
CVE-2000-0145 specifically affects Debian GNU/Linux version 4.0.
What is the cause of CVE-2000-0145?
CVE-2000-0145 is caused by the libguile.so library being installed with world-writable permissions, allowing unauthorized modification.
What are the potential impacts of CVE-2000-0145?
The potential impacts of CVE-2000-0145 include unauthorized access and modification of the libguile.so library, leading to exploitation of the system.