CVE-2000-0192: Medium severity caldera openlinux vulnerability
The default installation of Caldera OpenLinux 2.3 includes the CGI program rpmquery, which allows remote attackers to determine what packages are installed on the system.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Caldera OpenLinux 2.3 rpm_query CGIfrom your environment.Remove the rpm_query CGI from the web server (e.g., delete the rpm_query binary/script from the cgi-bin or otherwise uninstall the rpm_query component) to prevent remote package enumeration.
- Configuration
Disable execution of the rpm_query CGI if removal is not immediately possible (for example, remove execute permissions, remove from web server CGI configuration, or move it outside the web-accessible cgi-bin).
Caldera OpenLinux (CGI) rpm_query execution = disabled - Compensating control
Restrict access to the rpm_query CGI to trusted management IPs (at the firewall or web server access controls) until the CGI is removed or disabled.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0192?
CVE-2000-0192 is classified as a moderate severity vulnerability due to its ability to reveal installed packages to remote attackers.
How do I fix CVE-2000-0192?
To fix CVE-2000-0192, you should disable the rpm_query CGI script or upgrade to a patched version of Caldera OpenLinux.
What is the impact of CVE-2000-0192?
The impact of CVE-2000-0192 is that it allows remote attackers to gather information about installed packages, which could assist in further attacks.
Is CVE-2000-0192 exploitable from the internet?
Yes, CVE-2000-0192 is exploitable from the internet, as it involves a default CGI script accessible via web servers.
What systems are affected by CVE-2000-0192?
CVE-2000-0192 specifically affects the default installation of Caldera OpenLinux version 2.3.