CVE-2000-0235: Buffer Overflow
Buffer overflow in the huh program in the orville-write package allows local users to gain root privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
orville-write/huhfrom your environment.Uninstall the orville-write package or remove the vulnerable 'huh' binary from affected systems if it is not required.
- Configuration
Remove the setuid bit from the 'huh' binary to prevent local users from gaining root (for example: chmod u-s /path/to/huh).
orville-write huh program setuid bit = removed
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0235?
CVE-2000-0235 has a high severity rating due to the potential for local users to gain root privileges.
How do I fix CVE-2000-0235?
To fix CVE-2000-0235, users should update the affected programs within the orville-write package to a version that is not vulnerable.
Which versions of FreeBSD are affected by CVE-2000-0235?
CVE-2000-0235 affects FreeBSD versions 3.0 through 3.4.
Can CVE-2000-0235 be exploited remotely?
CVE-2000-0235 requires local access to the system, making it a local privilege escalation vulnerability.
Who is at risk from CVE-2000-0235?
Local users on systems running vulnerable versions of the FreeBSD operating system are at risk from CVE-2000-0235.