CVE-2000-0218: Buffer Overflow
Buffer overflow in Linux mount and umount allows local users to gain root privileges via a long relative pathname.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Remove the setuid bit or otherwise restrict execution of the mount and umount binaries so unprivileged local users cannot run them (for example: chmod u-s /sbin/mount /sbin/umount or restrict execution to root-only).
mount/umount (Linux) setuid bit (file permissions) = removed - Compensating control
Limit local untrusted user access to affected systems: disable or remove unnecessary local accounts, restrict interactive logins, and apply host-based access controls so potentially untrusted local users cannot exploit the mount/umount vulnerability to gain root.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0218?
CVE-2000-0218 is considered high severity due to its potential to allow local users to gain root privileges.
How do I fix CVE-2000-0218?
To fix CVE-2000-0218, update to a version of Linux that is patched against this buffer overflow vulnerability.
What software is affected by CVE-2000-0218?
CVE-2000-0218 affects specific versions of SCO OpenLinux Server 2.3 and SUSE Linux.
What kind of vulnerability is CVE-2000-0218?
CVE-2000-0218 is a buffer overflow vulnerability found in the mount and umount commands.
Can CVE-2000-0218 be exploited remotely?
CVE-2000-0218 cannot be exploited remotely as it requires local user access for exploitation.