CVE-2000-0172
Published Mar 3, 2000
Last updated 16 years ago
Overview
- Description
- The mtr program only uses a seteuid call when attempting to drop privileges, which could allow local users to gain root privileges.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.2
- Impact score
- 10
- Exploitability score
- 3.9
- Vector string
- AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.28:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "374B0A57-7231-403F-B339-1F0E8051E62E"
},
{
"criteria": "cpe:2.3:a:matt_kimball_and_roger_wolff:mtr:0.41:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CED7EB1A-43A1-40C8-BA1C-AE826986E89A"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:turbolinux:turbolinux:3.5b2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "667CF388-298D-4B64-9BA5-89D153FFA998"
},
{
"criteria": "cpe:2.3:o:turbolinux:turbolinux:4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5D15A193-3E01-467C-AEAD-497F4600DB06"
},
{
"criteria": "cpe:2.3:o:turbolinux:turbolinux:4.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F7C765FF-0A3D-4BF4-B236-609658776ACA"
},
{
"criteria": "cpe:2.3:o:turbolinux:turbolinux:6.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C6619B49-8A89-4600-A47F-A39C8BF54259"
}
],
"operator": "OR"
}
]
}
]