CVE-2000-0285: Buffer Overflow
Buffer overflow in XFree86 3.3.x allows local users to execute arbitrary commands via a long -xkbmap parameter.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Do not start XFree86 X Server with the -xkbmap option. Remove or sanitize any use of -xkbmap in startup scripts, wrappers, or user-invocable commands to avoid passing a long argument that could trigger the buffer overflow.
XFree86 X Server -xkbmap parameter = do not pass / remove / sanitize - Compensating control
Restrict local user ability to invoke the XFree86 X Server until a vendor fix is available. Limit which users can execute the X server binary (remove execute permission for untrusted accounts or restrict via local policies), and prevent untrusted users from logging in or running processes that can start the server.
- Operational
Audit systems for invocations of XFree86 that include the -xkbmap option and investigate for indicators of arbitrary command execution. If suspicious activity or compromise is detected, perform incident response (stop the vulnerable service, isolate affected hosts, and remediate compromised accounts/systems).
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0285?
CVE-2000-0285 is considered a high-severity vulnerability due to its ability to allow local users to execute arbitrary commands.
How do I fix CVE-2000-0285?
To fix CVE-2000-0285, users should upgrade to a later version of XFree86 that no longer contains the buffer overflow flaw.
Who is affected by CVE-2000-0285?
Local users of XFree86 versions 3.3.x and 4.0 are vulnerable to CVE-2000-0285.
What causes the vulnerability in CVE-2000-0285?
The vulnerability in CVE-2000-0285 is caused by a buffer overflow in the handling of a long -xkbmap parameter.
Can CVE-2000-0285 be exploited remotely?
No, CVE-2000-0285 requires local access to the system to exploit the vulnerability.