Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.2
CVE-2000-0229: gpm utility can let local users gain higher privileges
CVE-2000-0229 · published 26 years ago
Summary
The gpm package on Debian, Red Hat and SUSE Linux does not correctly lower its privileges when running the gpm-root helper. A local user who can start this helper could obtain elevated rights on the system. Apply the latest security updates for gpm and restrict who can execute the gpm-root program.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| alessandro_rubini | gpm |
1.18.1 1.19 cpe:2.3:o:alessandro_rubini:gpm:1.18.1:*:*:*:*:*:*:* |
| debian | debian_linux |
2.0 2.1 2.2 cpe:2.3:o:debian:debian_linux:2.0:*:*:*:*:*:*:* |
| redhat | linux |
6.0 6.1 6.2 cpe:2.3:o:redhat:linux:6.0:*:i386:*:*:*:*:* |
| suse | suse_linux |
5.3 6.0 6.1 6.2 6.3 cpe:2.3:o:suse:suse_linux:5.3:*:*:*:*:*:*:* |
Original advisory text
gpm-root in the gpm package does not properly drop privileges, which allows local users to gain privileges by starting a utility from gpm-root.
gpm-root in the gpm package does not properly drop privileges, which allows local users to gain privileges by starting a utility from gpm-root.
References
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Severity
7.2
High
Timeline
Published22 Mar 2000
Updated31 Oct 2026
First seen29 Sep 2026
Sources
CVE-2000-0229 · NVD
Track software like this
Free during beta