CVE-2000-0308: Critical severity Netscape Enterprise server vulnerability

Q: What is the severity of CVE-2000-0308?

CVE-2000-0308 has a critical severity as it allows attackers to gain root privileges due to insecure file permissions.

Q: How do I fix CVE-2000-0308?

To fix CVE-2000-0308, ensure that proper file permissions are set on the affected Netscape servers to restrict unauthorized access.

Q: What systems are affected by CVE-2000-0308?

CVE-2000-0308 affects Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 running on SCO UnixWare 7.0.x and 2.1.3.

Q: Can CVE-2000-0308 be exploited remotely?

Yes, CVE-2000-0308 can be exploited remotely, allowing attackers to escalate privileges without local access.

Q: What are the potential consequences of CVE-2000-0308?

Exploiting CVE-2000-0308 could lead to complete system compromise, allowing unauthorized users to execute commands as the root user.

Published Mar 12, 2001

Updated

Insecure file permissions for Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 in SCO UnixWare 7.0.x and 2.1.3 allow an attacker to gain root privileges.

Affected Software

6 affected components

Netscape Enterprise server=2.0

Netscape Fasttrack Server=2.0

Netscape Fasttrack Server=2.01

Netscape Proxy Server=2.5

SCO UnixWare<=2.1.3

SCO UnixWare=7.0

Remediation

Patch Available

ftp://ftp.sco.com/SSE/security_bulletins/SB-99.08a

Event History

Mar 12, 2001

CVE Published

05:00 AM

May 7, 2001

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2000-0308?

CVE-2000-0308 has a critical severity as it allows attackers to gain root privileges due to insecure file permissions.

How do I fix CVE-2000-0308?