CVE-2000-0433: Medium severity SUSE SuSE Linux vulnerability
The SuSE aaabase package installs some system accounts with home directories set to /tmp, which allows local users to gain privileges to those accounts by creating standard user startup scripts such as profiles.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Change any system account entries installed by the aaa_base package that have their home directory set to /tmp so they use a secure, non-volatile directory. Update /etc/passwd or use usermod to assign an appropriate home directory for each affected system account.
SUSE aaa_base (system accounts) home_directory = not /tmp - Compensating control
Until home directories are corrected, restrict the ability for unprivileged users to create standard startup scripts in /tmp (for example by adjusting filesystem permissions or applying appropriate filesystem ACLs) to reduce the risk of local users gaining privileges via scripts placed in /tmp.
- Operational
Identify all accounts with home directories set to /tmp (for example by examining /etc/passwd), change their home directories to the secure locations, and remove any startup files placed in /tmp (such as .profile, .bashrc) that could grant elevated privileges. Investigate systems for signs of privilege escalation and remediate any compromise.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0433?
CVE-2000-0433 is considered a medium severity vulnerability due to its potential for local privilege escalation.
How do I fix CVE-2000-0433?
To fix CVE-2000-0433, administrators should change the home directory of the affected system accounts from /tmp to a secure location.
Which systems are affected by CVE-2000-0433?
CVE-2000-0433 affects various versions of SUSE Linux, specifically versions 6.1, 6.2, 6.3, and 6.4.
What causes the vulnerability in CVE-2000-0433?
The vulnerability in CVE-2000-0433 arises from the default configuration of certain system accounts having their home directories set to /tmp.
Can CVE-2000-0433 be exploited remotely?
CVE-2000-0433 cannot be exploited remotely as it requires local access to the affected system.