CVE-2000-1040: Critical severity SUSE SuSE Linux vulnerability
Published Dec 11, 2000
·Updated
Format string vulnerability in logging function of ypbind 3.3, while running in debug mode, leaks file descriptors and allows an attacker to cause a denial of service.
Affected Software
4 affected components
SUSE SuSE Linux=6.2
SUSE SuSE Linux=7.0
SUSE SuSE Linux=6.3
SUSE SuSE Linux=6.4
Remediation
Patch Available
Event History
Dec 11, 2000
CVE Published
05:00 AM
Jan 22, 2001
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2000-1040?
CVE-2000-1040 is considered a medium severity vulnerability due to its potential to cause denial of service.
2
How do I fix CVE-2000-1040?
To fix CVE-2000-1040, upgrade ypbind to a version that does not run in debug mode or apply any available security patches.
3
What systems are affected by CVE-2000-1040?
CVE-2000-1040 affects SUSE Linux versions 6.2, 6.3, 6.4, and 7.0.
4
What kind of threat does CVE-2000-1040 pose?
CVE-2000-1040 allows attackers to leak file descriptors, which can lead to a denial of service attack.
5
Is CVE-2000-1040 still a concern for current systems?
CVE-2000-1040 is primarily a historical vulnerability but should still be addressed if legacy systems are in use.