Privilege Escalation in gpm Package Affecting Red Hat Linux

CVE-2000-0229

Summary

The gpm package, specifically the gpm-root utility, contains a design flaw where it fails to adequately drop user privileges. This oversight allows local users to exploit the system by launching this utility and thus increasing their privilege level. The potential for unauthorized access to critical system functions highlights the necessity for users to update their gpm packages to prevent potential exploitation.

References