CVE-2000-0364: Medium severity redhat Linux vulnerability
screen and rxvt in Red Hat Linux 6.0 do not properly set the modes of tty devices, which allows local users to write to other ttys.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
screenfrom your environment.Uninstall the 'screen' package on affected Red Hat Linux systems if it is not required, to eliminate the vulnerable component.
- Remove
Remove
rxvtfrom your environment.Uninstall the 'rxvt' package on affected Red Hat Linux systems if it is not required, to eliminate the vulnerable component.
- Configuration
Ensure tty device nodes (e.g., /dev/tty*) have permissions that prevent other local users from writing to them. Correct and enforce ownership and file mode so ttys are not writable by unintended users.
tty device nodes device node permissions/mode = remove write access by other users - Compensating control
Restrict use of screen and rxvt to trusted accounts until a vendor fix is available (for example via local group membership, filesystem permissions, SELinux policy, or other access controls).
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0364?
CVE-2000-0364 is classified as a local security vulnerability that can lead to unauthorized access to tty devices.
How do I fix CVE-2000-0364?
To fix CVE-2000-0364, it's recommended to update to a newer version of Red Hat Linux that addresses the tty device mode settings.
Who is affected by CVE-2000-0364?
Local users on Red Hat Linux 6.0 are affected by CVE-2000-0364 due to improper handling of tty modes.
What impacts does CVE-2000-0364 have on Red Hat Linux 6.0?
CVE-2000-0364 allows local users to potentially write to other users' tty sessions, which can lead to privacy breaches.
Is CVE-2000-0364 a common vulnerability in older Linux systems?
Yes, CVE-2000-0364 highlights a common issue in older Linux systems where device permissions and access control were not adequately enforced.