CVE-2000-0184: Low severity redhat Linux vulnerability
Linux printtool sets the permissions of printer configuration files to be world-readable, which allows local attackers to obtain printer share passwords.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Change filesystem permissions on printer configuration files created by printtool to remove world-readable access and restrict read access to root or authorized users (for example, remove the 'others' read bit with chmod o-r on the affected files and ensure appropriate owner/group settings).
printtool (printer configuration files) file_permissions = remove world-readable permission (no read for others) - Operational
Assume printer share passwords may have been exposed; rotate printer share passwords and related credentials, and audit access to printer configuration files and logs for signs of unauthorized access before and after applying the permission changes.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0184?
The severity of CVE-2000-0184 is considered medium as it allows local attackers to obtain sensitive printer share passwords due to improper file permissions.
How do I fix CVE-2000-0184?
To fix CVE-2000-0184, ensure that printer configuration files are set to restrict access only to authorized users by modifying their file permissions.
Which platforms are affected by CVE-2000-0184?
CVE-2000-0184 affects specific versions of Mandrake Linux 7.0 and Red Hat Linux versions 6.1 and 6.2 across various architectures.
What is the impact of CVE-2000-0184?
The impact of CVE-2000-0184 allows local attackers to read sensitive printer configuration files, potentially exposing printer share passwords.
Is CVE-2000-0184 still a concern today?
CVE-2000-0184 is generally not a concern today due to the age of the affected systems, but systems using these outdated versions may still be at risk.