Red Hat Linux Usermode Package userhelper LANG/LC_AL privileges management

Summaryinfo

A vulnerability, which was classified as problematic, was found in Red Hat Linux. Affected by this issue is some unknown functionality of the file userhelper of the component Usermode Package. Executing a manipulation of the argument LANG/LC_AL as part of Environment Variable can lead to privileges management. This vulnerability appears as CVE-2000-1207. There is no available exploit. You should upgrade the affected component.

Detailsinfo

A vulnerability has been found in Red Hat Linux (Operating System) (affected version not known) and classified as critical. This vulnerability affects some unknown functionality of the file userhelper of the component Usermode Package. The manipulation of the argument LANG/LC_AL as part of a Environment Variable leads to a privileges management vulnerability. The CWE definition for the vulnerability is CWE-269. The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

userhelper in the usermode package on Red Hat Linux executes non-setuid programs as root, which does not activate the security measures in glibc and allows the programs to be exploited via format string vulnerabilities in glibc via the LANG or LC_ALL environment variables (CVE-2000-0844).

The weakness was presented 09/30/2000 as not defined advisory (Website). The advisory is shared for download at redhat.com. This vulnerability was named CVE-2000-1207. The exploitation appears to be easy. The attack needs to be approached locally. No form of authentication is required for a successful exploitation. There are known technical details, but no exploit is available. The MITRE ATT&CK project declares the attack technique as T1068.

Upgrading eliminates this vulnerability.

Additional details are provided at marc.theaimsgroup.com. See VDB-15809 for similar entry. VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• Operating System

Vendor

• Red Hat

Name

• Linux

License

• open-source

Website

• Vendor: https://www.redhat.com/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion