CVE-2000-0230: Buffer Overflow
Buffer overflow in imwheel allows local users to gain root privileges via the imwheel-solo script and a long HOME environmental variable.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
imwheelfrom your environment.Uninstall imwheel from affected systems (e.g., Halloween Linux and Red Hat Linux) until a vendor-supplied patch is available.
- Configuration
Remove the setuid bit on the imwheel-solo script to prevent local users from gaining root privileges (for example, run chmod u-s on the imwheel-solo executable).
imwheel-solo script setuid (SUID) permission = disabled
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0230?
CVE-2000-0230 has a high severity rating as it allows local users to gain root privileges.
How do I fix CVE-2000-0230?
To fix CVE-2000-0230, users are advised to remove the imwheel-solo script or properly limit the HOME environmental variable length.
What systems are affected by CVE-2000-0230?
CVE-2000-0230 affects Red Hat Linux versions 6.1, 6.2, and Halloween Linux version 4.0.
What causes CVE-2000-0230?
CVE-2000-0230 is caused by a buffer overflow vulnerability in the imwheel-solo script due to a long HOME environmental variable.
Can CVE-2000-0230 be exploited remotely?
CVE-2000-0230 cannot be exploited remotely as it requires local user access to execute the imwheel-solo script.