CVE-2000-0195: High severity corel linux vulnerability
setxconf in Corel Linux allows local users to gain root access via the -T parameter, which executes the user's .xserverrc file.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Corel Linux setxconffrom your environment.Uninstall the setxconf utility if it is not required to eliminate the vulnerable binary.
- Configuration
Remove the setuid root bit from the setxconf binary (for example: chmod u-s /usr/bin/setxconf) so it cannot be used to gain root privileges.
setxconf (Corel Linux) setuid bit = disabled - Configuration
Restrict execution of the setxconf binary to root only (for example: chmod 700 /usr/bin/setxconf) to prevent local users from invoking it with the -T parameter.
setxconf (Corel Linux) execute permission = root-only
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0195?
CVE-2000-0195 is classified as a high severity vulnerability due to the potential for local users to gain root access.
How do I fix CVE-2000-0195?
To mitigate CVE-2000-0195, ensure that the setxconf command does not allow unprivileged users to execute arbitrary .xserverrc files.
Who is affected by CVE-2000-0195?
CVE-2000-0195 affects local users of Corel Linux version 1.0.
What can an attacker do with CVE-2000-0195?
An attacker exploiting CVE-2000-0195 can execute arbitrary commands as the root user on the affected system.
Is CVE-2000-0195 still a concern today?
While CVE-2000-0195 is an older vulnerability, organizations using legacy systems with Corel Linux 1.0 should still consider it a security risk.