Vulnerability Name:

CVE-2000-0602 (CCN-4726)

Assigned:2000-06-21
Published:2000-06-21
Updated:2008-09-10
Summary:Secure Locate (slocate) in Red Hat Linux allows local users to gain privileges via a malformed configuration file that is specified in the LOCATE_PATH environmental variable.
CVSS v3 Severity:5.9 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): Low
Integrity (I): Low
Availibility (A): Low
CVSS v2 Severity:4.6 Medium (CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
4.6 Medium (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
Vulnerability Type:CWE-Other
Vulnerability Consequences:Data Manipulation
References:Source: CCN
Type: BugTraq Mailing List, Wed Jun 21 2000 - 05:54:08 CDT
rh 6.2 - gid compromises, etc

Source: CCN
Type: BugTraq Mailing List, Mon May 19 2003 - 17:45:26 CDT
Re: bazarr slocate

Source: MITRE
Type: CNA
CVE-2000-0602

Source: CCN
Type: OSVDB ID: 1420
Secure Locate (slocate) on Red Hat Linux LOCATE_PATH Variable Path Subversion Privilege Escalation

Source: BID
Type: UNKNOWN
1385

Source: CCN
Type: BID-1385
Secure Locate LOCATE_PATH Validation Vulnerability

Source: BUGTRAQ
Type: UNKNOWN
20000621 rh 6.2 - gid compromises, etc

Source: XF
Type: UNKNOWN
redhat-secure-locate-path(4726)

Vulnerable Configuration:Configuration 1:
  • cpe:/a:kevin_lindsay:secure_locate:2.0:*:*:*:*:*:*:*
  • OR cpe:/a:kevin_lindsay:secure_locate:2.1:*:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/o:redhat:linux:6.2:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    kevin_lindsay secure locate 2.0
    kevin_lindsay secure locate 2.1
    redhat linux 6.2