CVE-2000-0219: High severity redhat linux vulnerability
Red Hat 6.0 allows local users to gain root access by booting single user and hitting ^C at the password prompt.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Configure the system so single-user (runlevel 1) requires the root password and cannot be bypassed by interrupting the password prompt. Adjust bootloader and init/sulogin settings so that pressing ^C at the single-user password prompt does not drop to a root shell without authentication.
bootloader / single-user mode require_root_password_for_single_user = true - Configuration
Set a password on the system bootloader to prevent unauthorized users from modifying kernel boot parameters or selecting single-user mode at boot.
bootloader bootloader_password_protection = set - Compensating control
Restrict local/physical console and boot device access to trusted personnel. Disable or password-protect boot from removable media and secure BIOS/UEFI settings to prevent booting into single-user mode.
- Operational
Audit affected systems for signs of unauthorized root access. If compromise is suspected, rotate root and administrative credentials and restore systems from known-good backups before re-enabling network trust.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0219?
CVE-2000-0219 is considered a critical vulnerability due to the ease of gaining root access.
How do I fix CVE-2000-0219?
To mitigate CVE-2000-0219, ensure that access to single-user mode is controlled and password protection is implemented.
Who is affected by CVE-2000-0219?
CVE-2000-0219 affects local users of Red Hat Linux version 6.0.
What can attackers do with CVE-2000-0219?
Attackers can gain root access by exploiting the vulnerability in single-user mode.
When was CVE-2000-0219 discovered?
CVE-2000-0219 was discovered in the year 2000.