CVE-2000-0229: gpm-root in the gpm package does not properly drop privileges, which allows local users to gain privileges by starting a utility from gpm-root

Unscored severity · published Mar 22, 2000

CVE-2000-0229

gpm-root in the gpm package does not properly drop privileges, which allows local users to gain privileges by starting a utility from gpm-root

–

CVSS

0.8%

EPSS

On KEV

Description

gpm-root in the gpm package does not properly drop privileges, which allows local users to gain privileges by starting a utility from gpm-root.

Exploitation

Is it being used?

Exploit prediction (EPSS)0.8% · higher than 57% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

2.0; 2.1; 2.2; 2.2 · source: NVD

1.18.1; 1.19 · source: NVD

6.0; 6.1; 6.2 · source: NVD

5.3; 6.0; 6.1; 6.2; 6.3 · source: NVD

Affected product

Gpm

Alessandro Rubini

References