CVE-2000-0340: Buffer Overflow
Buffer overflow in Gnomelib in SuSE Linux 6.3 allows local users to execute arbitrary commands via the DISPLAY environmental variable.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
gnomelib (SuSE Linux 6.3)from your environment.Uninstall the gnomelib package on affected SuSE Linux 6.3 systems if the library is not required.
- Configuration
Ensure applications that run with elevated privileges (including setuid programs) do not inherit an untrusted DISPLAY value—clear/unset or otherwise sanitize the DISPLAY environment variable before privilege elevation (for example via wrapper scripts, PAM/environment configuration, or program-level sanitization).
Gnomelib and applications that process the X11 DISPLAY environment variable DISPLAY environment variable handling = unset or sanitized for privileged processes - Compensating control
Restrict local user access to affected systems: disable or remove untrusted local accounts, limit local login and execution rights to trusted administrators, and restrict which users can run binaries that link against gnomelib until a vendor fix is available.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0340?
CVE-2000-0340 is classified as a high severity vulnerability due to the potential for local users to execute arbitrary commands.
How do I fix CVE-2000-0340?
To fix CVE-2000-0340, upgrade to a patched version of SuSE Linux, such as 6.4 or later.
Who is affected by CVE-2000-0340?
CVE-2000-0340 affects users of SuSE Linux versions 6.3 and 6.4.
What is the impact of CVE-2000-0340?
The impact of CVE-2000-0340 is that it allows local users to gain elevated privileges through a buffer overflow.
What software does CVE-2000-0340 affect?
CVE-2000-0340 primarily affects the Gnomelib component within SuSE Linux installations.