CVE-2000-0293: Low severity SUSE SuSE Linux vulnerability
aaabase in SuSE Linux 6.3, and cron.daily in earlier versions, allow local users to delete arbitrary files by creating files whose names include spaces, which are then incorrectly interpreted by aaabase when it deletes expired files from the /tmp directory.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
aaa_basefrom your environment.Uninstall or remove the aaa_base package or its cleanup script to prevent it from deleting arbitrary files in /tmp until a patch is available.
- Configuration
Disable the daily /tmp cleanup that invokes aaa_base (e.g., remove or rename the aaa_base script from /etc/cron.daily or remove its execute permission) until an official fix is available. This prevents the vulnerable whitespace-based deletion logic from running.
cron.daily / aaa_base cleanup enabled = false
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0293?
CVE-2000-0293 is classified as a moderate severity vulnerability due to its potential for local users to delete arbitrary files.
How do I fix CVE-2000-0293?
To address CVE-2000-0293, ensure you update to the latest version of SuSE Linux that has patched this vulnerability.
What versions of SUSE Linux are affected by CVE-2000-0293?
CVE-2000-0293 affects SUSE Linux versions 6.0, 6.1, 6.2, and 6.3.
Can local users exploit CVE-2000-0293?
Yes, local users can exploit CVE-2000-0293 to delete files by creating files with names that include spaces.
What file is primarily involved in the exploitation of CVE-2000-0293?
The aaa_base script is primarily involved in the exploitation of CVE-2000-0293 when it processes expired files in the /tmp directory.