CVE-2000-0506 The "capabilities" feature in Linux before 2.2.16 allows local users to cause a denial of service or gain privileges by setting the capabilities to prevent a setuid program from dropping privileges, a...
HighCVSS 10.0
EPSS 11.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The "capabilities" feature in Linux before 2.2.16 allows local users to cause a denial of service or gain privileges by setting the capabilities to prevent a setuid program from dropping privileges, aka the "Linux kernel setuid/setcap vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux kernel | = 2.0 | No fix listed |
| Linux kernel | = 2.0.30 | No fix listed |
| Linux kernel | = 2.0.33 | No fix listed |
| Linux kernel | = 2.0.34 | No fix listed |
| Linux kernel | = 2.0.35 | No fix listed |
| Linux kernel | = 2.0.36 | No fix listed |
| Linux kernel | = 2.0.37 | No fix listed |
| Linux kernel | = 2.0.38 | No fix listed |
| Linux kernel | = 2.1 | No fix listed |
| Linux kernel | = 2.2.0 | No fix listed |
| Linux kernel | = 2.2.10 | No fix listed |
| Linux kernel | = 2.2.12 | No fix listed |
| Linux kernel | = 2.2.13 | No fix listed |
| Linux kernel | = 2.2.14 | No fix listed |
| Linux kernel | = 2.2.15 | No fix listed |
| Linux kernel | = 2.2.15-pre16 | No fix listed |
| Linux kernel | = 2.2.15_pre20 | No fix listed |
| Linux kernel | = 2.2.16 | No fix listed |
| Linux kernel | = 2.2.16-pre5 | No fix listed |
References
- 20000609 Trustix Security Advisory mailing-list
- 20000608 CONECTIVA LINUX SECURITY ANNOUNCEMENT - kernel mailing-list
- RHSA-2000:037 vendor-advisory
- 1322 vdb-entry
- 20000609 Sendmail & procmail local root exploits on Linux kernel up to 2.2.16pre5 mailing-list