CVE-2000-0388: Buffer Overflow

Published May 9, 1990

Updated

Buffer overflow in FreeBSD libmytinfo library allows local users to execute commands via a long TERMCAP environmental variable.

Affected Software

5 affected components

FreeBSD FreeBSD=3.1

FreeBSD FreeBSD=3.0

FreeBSD FreeBSD=3.2

FreeBSD FreeBSD=3.3

FreeBSD FreeBSD=3.4

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Remove
Remove FreeBSD libmytinfo from your environment.
If libmytinfo is not required, uninstall or remove the FreeBSD libmytinfo library from affected systems to eliminate the vulnerable code path until an official patch is available.
Compensating control
Mitigate risk until a patch is available by preventing untrusted local users from exploiting TERMCAP: restrict or isolate untrusted local accounts (for example via restricted shells, containers, or chroot), and remove or restrict execution permissions on programs that process TERMCAP from untrusted environments.

Event History

May 9, 1990

CVE Published

04:00 AM

Data Sourced

via NVD·04:00 AM

DescriptionSeverityAffected Software

Jul 12, 2000

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2000-0388?

CVE-2000-0388 is classified as a high severity vulnerability due to the potential for local users to execute arbitrary commands.

How do I fix CVE-2000-0388?

To fix CVE-2000-0388, update your FreeBSD system to a version that contains the security patch addressing this vulnerability.

Who is affected by CVE-2000-0388?

CVE-2000-0388 affects FreeBSD versions 3.0 to 3.4.

What is the nature of the vulnerability in CVE-2000-0388?

The vulnerability in CVE-2000-0388 is a buffer overflow in the libmytinfo library that occurs due to a long TERMCAP environmental variable.

Can CVE-2000-0388 be exploited remotely?

CVE-2000-0388 cannot be exploited remotely; it requires local access to the system.