| Vulnerability Name: | CVE-2000-0845 (CCN-5262) | ||||||||
| Assigned: | 2000-09-19 | ||||||||
| Published: | 2000-09-19 | ||||||||
| Updated: | 2008-09-05 | ||||||||
| Summary: | kdebug daemon (kdebugd) in Digital Unix 4.0F allows remote attackers to read arbitrary files by specifying the full file name in the initialization packet. | ||||||||
| CVSS v3 Severity: | 6.5 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
| ||||||||
| CVSS v2 Severity: | 6.4 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N)
| ||||||||
| Vulnerability Type: | CWE-Other | ||||||||
| Vulnerability Consequences: | Gain Privileges | ||||||||
| References: | Source: BUGTRAQ Type: Patch, Vendor Advisory 20000918 [ENIGMA] Digital UNIX/Tru64 UNIX remote kdebug Vulnerability Source: CCN Type: Enigma Security Advisory EN18090001 kdebugd service file vulnerability Source: MITRE Type: CNA CVE-2000-0845 Source: CCN Type: OSVDB ID: 8764 Digital Unix kdebugd Remote Arbitrary File Access Source: CCN Type: BID-1693 Compaq Tru64 kdebugd Remote Arbitrary File Write Vulnerability Source: CCN Type: Compaq Web site Tru64 UNIX on AlphaServer Source: XF Type: UNKNOWN du-kdebugd-write-access(5262) | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||