CVE-2000-0366: Low severity Debian Debian Linux vulnerability
dump in Debian GNU/Linux 2.1 does not properly restore symlinks, which allows a local user to modify the ownership of arbitrary files.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
debian/dumpfrom your environment.If dump is not required, uninstall the dump package or remove the dump binary from systems running Debian GNU/Linux 2.1 to eliminate the vulnerable component.
- Configuration
Restrict execution of the dump binary to privileged administrators only (for example: chown root:root /usr/sbin/dump; chmod 700 /usr/sbin/dump) or otherwise ensure only trusted accounts can run dump.
dump (Debian GNU/Linux 2.1) executable permission / allowed users = root-only - Compensating control
Restrict local user access to backup devices, backup files, and restoration facilities using filesystem permissions and local ACLs or sudoers entries so untrusted local users cannot perform restore operations.
- Operational
Audit the filesystem for files with unexpected ownership changes and restore correct ownerships from known-good backups; review recent restore operations to identify any unauthorized ownership modifications.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0366?
CVE-2000-0366 is categorized as a moderate severity vulnerability due to its potential to allow local users to modify file ownership.
How do I fix CVE-2000-0366?
To address CVE-2000-0366, update your Debian GNU/Linux system to a version that properly restores symlinks.
What software is affected by CVE-2000-0366?
CVE-2000-0366 specifically affects Debian GNU/Linux version 2.1.
Who can exploit CVE-2000-0366?
CVE-2000-0366 can be exploited by local users with access to the system.
What are the potential impacts of CVE-2000-0366?
The potential impact of CVE-2000-0366 includes unauthorized modification of file ownership, which can lead to privilege escalation.