high7.2Public exploit code
CVE-2000-0231
Linux kreatecd trusts a user-supplied path that is used to find the cdrecord program, allowing local users to gain root privileges.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Halloween Linux 4.0 / SuSE Linux 6.0/6.1/6.2/6.3 - 'kreatecd' Local Privilege Escalation2000-03-16 · local · linux · Verified
Impact
Linux kreatecd trusts a user-supplied path that is used to find the cdrecord program, allowing local users to gain root privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Halloween | Halloween Linux | Version 4.0 |
| Suse | Suse Linux | Versions 6.0, 6.1, 6.2, 6.3 |