CVE-2000-0864 Race condition in the creation of a Unix domain socket in GNOME esound 0.2.19 and earlier allows a local user to change the permissions of arbitrary files and directories, and gain additional privileg...
MediumCVSS 6.2
EPSS 0.69%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Race condition in the creation of a Unix domain socket in GNOME esound 0.2.19 and earlier allows a local user to change the permissions of arbitrary files and directories, and gain additional privileges, via a symlink attack.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNOME esound | = 0.2.19 | No fix listed |
References
- 20000911 Patch for esound-0.2.19 mailing-list
- MDKSA-2000:051 vendor-advisory
- 20001006 Immunix OS Security Update for esound mailing-list
- FreeBSD-SA-00:45 vendor-advisory
- 20001008 esound: race condition vendor-advisory
- 20001012 esound daemon race condition vendor-advisory
- RHSA-2000:077 vendor-advisory
- 1659 exploit patch vdb-entry vendor-advisory
- gnome-esound-symlink(5213) vdb-entry