CVE-2000-1043: Critical severity Mandrakesoft Mandrake Linux vulnerability
Published Dec 11, 2000
·Updated
Format string vulnerability in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root privileges when ypserv is built without a vsyslog() function.
Affected Software
3 affected components
Mandrakesoft Mandrake Linux=7.0
Mandrakesoft Mandrake Linux=7.1
Mandrakesoft Mandrake Linux=6.1
Remediation
Event History
Dec 11, 2000
CVE Published
05:00 AM
Jan 22, 2001
CVE Published
via MITRE·05:00 AM
Data Sourced
via MITRE·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2000-1043?
CVE-2000-1043 is considered a high severity vulnerability as it allows an attacker to gain root privileges on affected systems.
2
How do I fix CVE-2000-1043?
To fix CVE-2000-1043, update ypserv to a version that is not built without a vsyslog() function.
3
What systems are affected by CVE-2000-1043?
CVE-2000-1043 affects Mandrake Linux versions 6.1, 7.0, and 7.1, and potentially other Linux operating systems.
4
Can CVE-2000-1043 be exploited remotely?
Yes, CVE-2000-1043 can be exploited remotely by sending crafted input to the ypserv service.
5
Is there a patch available for CVE-2000-1043?
Yes, patches are available for the affected versions of Mandrake Linux to remediate CVE-2000-1043.