CVE-2000-1136: Medium severity Debian Elvis Tiny vulnerability
Published Jan 9, 2001
·Updated
elvis-tiny before 1.4-10 in Debian GNU/Linux, and possibly other Linux operating systems, allows local users to overwrite files of other users via a symlink attack.
Affected Software
1 affected component
Debian Elvis Tiny<=1.4.9
Remediation
Patch Available
Event History
Jan 9, 2001
CVE Published
05:00 AM
Jan 22, 2001
CVE Published
via MITRE·05:00 AM
Data Sourced
via MITRE·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2000-1136?
CVE-2000-1136 is classified as a moderate severity vulnerability due to its potential for local users to overwrite files of other users.
2
How do I fix CVE-2000-1136?
To fix CVE-2000-1136, upgrade to elvis-tiny version 1.4-10 or later on your Debian system.
3
Who is affected by CVE-2000-1136?
CVE-2000-1136 affects local users on Debian GNU/Linux systems running versions of elvis-tiny prior to 1.4-10.
4
What type of attack does CVE-2000-1136 involve?
CVE-2000-1136 involves a symlink attack that allows local users to overwrite other users' files.
5
Can CVE-2000-1136 affect other Linux distributions?
While CVE-2000-1136 is primarily noted for Debian GNU/Linux, similar configurations on other Linux distributions may also be vulnerable.