CVE-2000-0210: Low severity sun workshop vulnerability
The lit program in Sun Flex License Manager (FlexLM) follows symlinks, which allows local users to modify arbitrary files.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Sun Flex License Manager (lit)from your environment.If 'lit' is not required, uninstall or remove the 'lit' program from the system to eliminate the symlink-following vulnerability until an official patch is available.
- Configuration
Restrict access to the 'lit' executable until a vendor fix is available: remove execution and/or modification rights for non-administrative/local users (use filesystem permissions or ACLs to allow only trusted administrators to read/execute the binary).
Sun Flex License Manager (lit) executable/file access = restrict to administrative users only
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0210?
CVE-2000-0210 is considered a high-severity vulnerability due to its potential for local users to modify arbitrary files.
How do I fix CVE-2000-0210?
To fix CVE-2000-0210, ensure that the lit program does not follow symlinks or apply patches that mitigate this behavior.
Who is affected by CVE-2000-0210?
CVE-2000-0210 primarily affects users of Sun Flex License Manager, specifically version 5.0 of the Sun Workshop.
What type of vulnerability is CVE-2000-0210?
CVE-2000-0210 is a symbolic link vulnerability that allows local users to manipulate files on the system.
Can CVE-2000-0210 be exploited remotely?
CVE-2000-0210 cannot be exploited remotely as it requires local access to the system to manipulate the affected program.