First published: Wed Jun 21 2000(Updated: )
Buffer overflow in fld program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges via an input file containing long CHARSET_REGISTRY or CHARSET_ENCODING settings.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Debian Debian Linux | =2.0 | |
Debian Debian Linux | =2.1 | |
Debian Debian Linux | =2.2 | |
Debian Debian Linux | =2.3 | |
Mandrake Linux | =6.1 | |
Mandrake Linux | =7.0 | |
Mandrake Linux | =7.1 | |
Red Hat Linux | =5.0 | |
Red Hat Linux | =5.1 | |
Red Hat Linux | =5.2 | |
Red Hat Linux | =6.1 | |
Red Hat Linux | =6.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2000-0607 is considered a high severity vulnerability due to the potential for local users to gain root privileges.
To fix CVE-2000-0607, users should update to patched versions of the affected Linux distributions.
CVE-2000-0607 affects Debian Linux versions 2.0 to 2.3, Mandrake Linux versions 6.1 to 7.1, and Red Hat Linux versions 5.0 to 6.2.
CVE-2000-0607 cannot be exploited remotely as it requires local user access to exploit the buffer overflow.
The nature of the vulnerability in CVE-2000-0607 involves a buffer overflow in the fld program due to improperly handled input file settings.