CVE-2000-0154: Low severity SCO UnixWare vulnerability
The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Xinuos UnixWare ARCserve agentfrom your environment.Uninstall the ARCserve agent from affected UnixWare systems if it is not required to eliminate the symlink vulnerability.
- Configuration
Disable the ARCserve agent service on affected UnixWare systems to prevent local attackers from exploiting the symlink vulnerability until an official fix is available.
ARCserve agent (UnixWare) service_enabled = false - Compensating control
Restrict local user privileges and limit filesystem write access to the directories used by the ARCserve agent (prevent untrusted users from creating symlinks). Isolate or restrict access to hosts running the agent to trusted administrators until a patch or vendor guidance is available.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0154?
CVE-2000-0154 is considered to be a moderate severity vulnerability that enables local attackers to perform a symlink attack.
How do I fix CVE-2000-0154?
To fix CVE-2000-0154, ensure that the file permissions for the ARCserve agent are properly configured to restrict unauthorized access.
Who is affected by CVE-2000-0154?
CVE-2000-0154 affects users of UnixWare versions 7.1 and 7.1.1 that have the ARCserve agent installed.
What type of attack does CVE-2000-0154 enable?
CVE-2000-0154 enables a local symlink attack that allows unauthorized modifications to arbitrary files.
Is CVE-2000-0154 a remote or local vulnerability?
CVE-2000-0154 is a local vulnerability, meaning an attacker must have local access to the system to exploit it.