CVE-2000-0194: High severity corel linux vulnerability
buildxconf in Corel Linux allows local users to modify or create arbitrary files via the -x or -f parameters.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Corel Linux buildxconffrom your environment.Uninstall or remove the buildxconf utility if it is not required to eliminate the capability for local users to create or modify arbitrary files via the -x or -f parameters.
- Configuration
Limit execution of the buildxconf binary to trusted administrative accounts—e.g., change ownership to root and set file permissions so only root (or an admin group) can execute the binary—to prevent local unprivileged users from invoking the -x or -f options.
buildxconf (Corel Linux) executable permissions = restrict to administrative/root users - Operational
Search the filesystem for unexpected or recently created/modified files that could have been altered via buildxconf and restore affected files from known-good backups.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0194?
CVE-2000-0194 is considered a high severity vulnerability due to the potential for local users to modify or create arbitrary files.
How do I fix CVE-2000-0194?
To fix CVE-2000-0194, you should restrict access to the buildxconf command or apply patches provided by Corel for the affected version.
Who is affected by CVE-2000-0194?
CVE-2000-0194 primarily affects users of Corel Linux version 1.0.
What type of vulnerability is CVE-2000-0194?
CVE-2000-0194 is classified as a local file modification vulnerability.
Can CVE-2000-0194 be exploited remotely?
CVE-2000-0194 cannot be exploited remotely as it requires local access to the affected system.