First published: Mon Jul 10 2000(Updated: )
Tnef program in Linux systems allows remote attackers to overwrite arbitrary files via TNEF encoded compressed attachments which specify absolute path names for the decompressed output.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
SUSE Linux | =6.3 | |
SUSE Linux | =6.3 | |
SUSE Linux | =6.3-alpha | |
SUSE Linux | =6.4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2000-0614 has a moderate severity rating due to the potential for remote file overwriting.
Fixing CVE-2000-0614 involves upgrading to a patched version of the Tnef program or applying available security patches.
CVE-2000-0614 affects users of SUSE Linux versions 6.3 and 6.4.
CVE-2000-0614 exploit takes advantage of TNEF encoded attachments that use absolute path names to overwrite arbitrary files.
The vulnerable systems include SUSE Linux 6.3 (including PPC and alpha) and 6.4.