CVE-2000-0454: Buffer Overflow
Buffer overflow in Linux cdrecord allows local users to gain privileges via the dev parameter.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
cdrecord (Mandrake Linux)from your environment.Uninstall or remove the cdrecord package/binary from affected Mandrake Linux systems to eliminate the vulnerable component.
- Compensating control
If removal is not possible, restrict execution of cdrecord to trusted administrators only (for example by removing execute permissions for untrusted users or limiting access to the binary/device) and limit local user access to affected systems until a patch is available.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0454?
CVE-2000-0454 is considered a high-severity vulnerability due to its potential to allow local users to gain elevated privileges.
How do I fix CVE-2000-0454?
To fix CVE-2000-0454, it is recommended to upgrade to a version of cdrecord that is not vulnerable to this buffer overflow.
Who is affected by CVE-2000-0454?
CVE-2000-0454 affects local users of Mandrake Linux version 7.0 using the cdrecord utility.
What type of vulnerability is CVE-2000-0454?
CVE-2000-0454 is a buffer overflow vulnerability that can lead to privilege escalation.
Can CVE-2000-0454 be exploited remotely?
No, CVE-2000-0454 can only be exploited locally, requiring users to have access to the system.