CVE-2000-1042: Buffer Overflow

Published Dec 11, 2000

Updated

Buffer overflow in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root privileges when ypserv is built without a vsyslog() function.

Affected Software

3 affected components

Mandrakesoft Mandrake Linux=7.0

Mandrakesoft Mandrake Linux=7.1

Mandrakesoft Mandrake Linux=6.1

Remediation

Patch Available

http://www.linux-mandrake.com/en/security/MDKSA-2000-064.php3?dis=7.1

Event History

Dec 11, 2000

CVE Published

05:00 AM

Jan 22, 2001

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2000-1042?

CVE-2000-1042 has a high severity rating due to the potential for an attacker to gain root privileges on the affected systems.

How do I fix CVE-2000-1042?

To fix CVE-2000-1042, update ypserv to a version that includes a proper implementation of vsyslog() or replace it with a safer alternative.

Which versions are affected by CVE-2000-1042?

CVE-2000-1042 affects Mandrake Linux versions 6.1, 7.0, and 7.1 when ypserv is built without the vsyslog() function.

What vulnerabilities does CVE-2000-1042 exploit?

CVE-2000-1042 exploits a buffer overflow in the ypserv service, allowing unauthorized elevation of privileges.

Is CVE-2000-1042 still a concern today?

Although CVE-2000-1042 is more of a historical vulnerability, it is still a concern for systems running outdated versions of Mandrake Linux.