NetSight
IP …
high7.2Public exploit code

CVE-2000-0229

gpm-root in the gpm package does not properly drop privileges, which allows local users to gain privileges by starting a utility from gpm-root.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

gpm-root in the gpm package does not properly drop privileges, which allows local users to gain privileges by starting a utility from gpm-root.

Affected products

VendorProductAffected versions
Alessandro RubiniGpm
Versions 1.18.1, 1.19
DebianDebian Linux
Versions 2.0, 2.1, 2.2
RedhatLinux
Versions 6.0, 6.1, 6.2
SuseSuse Linux
Versions 5.3, 6.0, 6.1, 6.2, 6.3

References