CVE-2000-0392: Buffer Overflow
Buffer overflow in ksu in Kerberos 5 allows local users to gain root privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Kerberos 5 (ksu)from your environment.Uninstall the ksu component or remove the ksu binary from systems if it is not required to eliminate the vulnerable component.
- Configuration
Disable ksu or otherwise prevent its use (for example, remove execute permissions or disable any service that provides ksu) until an official patch or update is available.
Kerberos 5 (ksu) ksu_enabled = false - Compensating control
Restrict local user access on affected hosts: limit shell/login access for untrusted accounts, enforce least-privilege for local users, and apply host-based access controls to reduce the risk of local exploitation until ksu is removed or patched.
- Operational
Audit systems for signs of local privilege escalation (use of ksu, unexpected root activity) and perform incident response if exploitation is suspected; assume potential compromise and remediate accordingly.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0392?
CVE-2000-0392 has a high severity rating due to its potential to allow local users to gain root privileges.
How do I fix CVE-2000-0392?
To fix CVE-2000-0392, users should update their Kerberos implementation to a version that addresses the buffer overflow.
Who is affected by CVE-2000-0392?
CVE-2000-0392 affects local users of systems running vulnerable versions of Kerberos 5, including specific distributions of Red Hat Linux and MIT Kerberos.
What causes the vulnerability in CVE-2000-0392?
The vulnerability in CVE-2000-0392 is caused by a buffer overflow in the ksu utility of Kerberos 5.
Can CVE-2000-0392 be exploited remotely?
CVE-2000-0392 cannot be exploited remotely as it requires local access to the system.