CVE-2000-1213: High severity iputils iputils vulnerability
ping in iputils before 20001010, as distributed on Red Hat Linux 6.2 through 7J and other operating systems, does not drop privileges after acquiring a raw socket, which increases ping's exposure to bugs that otherwise would occur at lower privileges.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2000-1213?
CVE-2000-1213 is classified as a medium severity vulnerability due to its potential to allow exploitation under specific conditions.
How do I fix CVE-2000-1213?
To fix CVE-2000-1213, update to iputils version 2000-10-10 or later where the privilege drop issue has been resolved.
What systems are affected by CVE-2000-1213?
CVE-2000-1213 affects iputils versions prior to 2000-10-10 as well as Red Hat Linux versions 6.2 and 7.0, among other systems.
What are the consequences of CVE-2000-1213?
The consequences of CVE-2000-1213 can include increased risk of exploitation due to higher privileges retained by the ping utility.
Is CVE-2000-1213 remote or local vulnerability?
CVE-2000-1213 is primarily considered a local vulnerability since it requires access to execute the ping command.