VulnerabilityModified

CVE-2000-1042

Buffer overflow in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root privileges when ypserv is built without a vsyslog() function.

HIGH 10.0EPSS 1.97%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (1.97%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Buffer overflow in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root privileges when ypserv is built without a vsyslog() function.

CVSS 2.0: 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS: 1.97% probability · 79th percentile
CISA KEV: Not listed
Affected: mandrakesoft/mandrake linux
Source: cve@mitre.org

References

http://www.linux-mandrake.com/en/security/MDKSA-2000-064.php3?dis=7.1Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5730
http://www.linux-mandrake.com/en/security/MDKSA-2000-064.php3?dis=7.1Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5730

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.