CVE-2000-1195: High severity Caldera Openlinux Edesktop vulnerability

Published Aug 31, 2001

Updated

telnet daemon (telnetd) from the Linux netkit package before netkit-telnet-0.16 allows remote attackers to bypass authentication when telnetd is running with the -L command line option.

Affected Software

2 affected components

Caldera Openlinux Edesktop=2.3

Caldera Openlinux Eserver=2.3

Remediation

Patch Available

http://www.caldera.com/support/security/advisories/CSSA-2000-008.0.txt

Event History

Aug 31, 2001

CVE Published

04:00 AM

Mar 9, 2002

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2000-1195?

CVE-2000-1195 is considered a critical vulnerability due to its potential for unauthorized remote access.

How do I fix CVE-2000-1195?

To fix CVE-2000-1195, ensure that telnetd is not run with the -L option and consider disabling telnet in favor of more secure protocols like SSH.

Which systems are affected by CVE-2000-1195?

CVE-2000-1195 affects Caldera OpenLinux eDesktop and SCO OpenLinux Server version 2.3.

Can CVE-2000-1195 be exploited remotely?

Yes, CVE-2000-1195 allows remote attackers to bypass authentication if telnetd is improperly configured.

What is the nature of the vulnerability in CVE-2000-1195?

The vulnerability in CVE-2000-1195 is related to improper handling of authentication by the telnet daemon when certain command line options are used.