CVE-2000-1011: Buffer Overflow

Published Dec 11, 2000

Updated

Buffer overflow in catopen() function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to gain root privileges via a long environmental variable.

Affected Software

12 affected components

FreeBSD FreeBSD=3.1

FreeBSD FreeBSD=3.5.1

FreeBSD FreeBSD=4.1

FreeBSD FreeBSD=3.0

FreeBSD FreeBSD=3.2

FreeBSD FreeBSD=4.2

FreeBSD FreeBSD=3.3

FreeBSD FreeBSD=4.0

FreeBSD FreeBSD=4.1.1

FreeBSD FreeBSD=3.4

FreeBSD FreeBSD=3.5

FreeBSD FreeBSD=5.0

Remediation

Patch Available

ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:53.catopen.asc

Event History

Dec 11, 2000

CVE Published

05:00 AM

Jan 22, 2001

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2000-1011?

CVE-2000-1011 is classified as a high severity vulnerability allowing local users to gain root privileges.

How do I fix CVE-2000-1011?

To resolve CVE-2000-1011, upgrade to a version of FreeBSD later than 5.0 that includes the patch for the buffer overflow in the catopen() function.

Which FreeBSD versions are affected by CVE-2000-1011?

CVE-2000-1011 affects FreeBSD versions 5.0 and earlier, including 3.1, 3.5.1, 4.1, 3.0, 3.2, 4.2, 3.3, 4.0, 4.1.1, 3.4, and 3.5.

Can CVE-2000-1011 be exploited remotely?

CVE-2000-1011 primarily allows exploitation through local access, not remote access, due to its nature.

Who is impacted by CVE-2000-1011?

Local users of affected FreeBSD systems are primarily impacted by CVE-2000-1011 because it requires local access to exploit.