CVE-2000-0186: Buffer Overflow

Published Feb 28, 2000

Updated

Buffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long command line argument.

Affected Software

11 affected components

redhat Linux=5.1

redhat Linux=5.2

Mandrakesoft Mandrake Linux=7.0

redhat Linux=6.0

Turbolinux Turbolinux=4.4

Turbolinux Turbolinux=4.2

Turbolinux Turbolinux=6.0.2

redhat Linux=6.1

redhat Linux=6.2

FreeBSD FreeBSD=3.4

Mandrakesoft Mandrake Linux=6.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Remove
Remove dump (ext2fs backup package) from your environment.
Uninstall or remove the dump utility from affected systems if it is not required. Do not keep the vulnerable dump binary installed until an official vendor fix is available.

Event History

Feb 28, 2000

CVE Published

05:00 AM

Data Sourced

via NVD·05:00 AM

DescriptionSeverityAffected Software

Apr 10, 2000

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2000-0186?

CVE-2000-0186 is considered a high severity vulnerability due to the potential for local users to gain elevated privileges.

How do I fix CVE-2000-0186?

To fix CVE-2000-0186, update the affected software to the latest version provided by your Linux distribution.

Which Linux distributions are affected by CVE-2000-0186?

CVE-2000-0186 affects several Linux distributions including FreeBSD 3.4, Mandrake Linux 6.1 and 7.0, and various versions of Red Hat Linux.

What type of vulnerability is CVE-2000-0186?

CVE-2000-0186 is a buffer overflow vulnerability that arises from improper handling of long command line arguments.

Can CVE-2000-0186 be exploited remotely?

CVE-2000-0186 cannot be exploited remotely as it requires local user access to the system.