CVE-2000-0531: Low severity caldera openlinux vulnerability
Linux gpm program allows local users to cause a denial of service by flooding the /dev/gpmctl device with STREAM sockets.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
gpmfrom your environment.Uninstall or disable the gpm package/program if local mouse console support is not required on the system to eliminate the vulnerable component.
- Configuration
Restrict access to /dev/gpmctl so only root can open it. Example: chown root:root /dev/gpmctl && chmod 0600 /dev/gpmctl (or set equivalent persistent udev rule) to prevent unprivileged users from creating STREAM sockets against the device.
gpm /dev/gpmctl device device_permissions = root-only (owner root:root, mode 0600) - Compensating control
Limit or revoke unprivileged local user access as a workaround (remove unneeded local accounts, restrict login shells). Alternatively enforce MAC policies (SELinux/AppArmor) to prevent unprivileged processes from accessing /dev/gpmctl or creating STREAM sockets to it.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0531?
CVE-2000-0531 is considered a denial of service vulnerability that affects certain versions of Linux.
How do I fix CVE-2000-0531?
To fix CVE-2000-0531, you should upgrade to a version of the affected software that has the appropriate patches implemented.
Which software is affected by CVE-2000-0531?
CVE-2000-0531 affects SCO OpenLinux Server 2.3, 2.4, and Red Hat Linux versions 6.0 and 6.1.
Can CVE-2000-0531 be exploited remotely?
No, CVE-2000-0531 is a local vulnerability that requires local access to exploit.
What impact does CVE-2000-0531 have on systems?
CVE-2000-0531 allows local users to cause a denial of service by flooding the /dev/gpmctl device with traffic.