CVE-2000-0229
gpm-root in the gpm package does not properly drop privileges, which allows local users to gain...
gpm-root in the gpm package does not properly drop privileges, which allows local users to gain privileges by starting a utility from gpm-root.
Exploit likelihood
What each source reports
NVD Score used
gpm-root in the gpm package does not properly drop privileges, which allows local users to gain privileges by starting a utility from gpm-root.
- Record
CVE-2000-0229- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
gpm-root in the gpm package does not properly drop privileges, which allows local users to gain privileges by starting a utility from gpm-root.
- Record
CVE-2000-0229- Updated
- 2026-11-02
EUVDEUVD-2000-0228 No score
gpm-root in the gpm package does not properly drop privileges, which allows local users to gain privileges by starting a utility from gpm-root.
- Record
EUVD-2000-0228- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jj5p-pw57-256v No score
gpm-root in the gpm package does not properly drop privileges, which allows local users to gain...
gpm-root in the gpm package does not properly drop privileges, which allows local users to gain privileges by starting a utility from gpm-root.
- Record
GHSA-jj5p-pw57-256v- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | gpm 1.18.1/1.19 / Debian 2.x / RedHat 6.x / S.u.S.E 5.3/6.x - gpm Setgid | 2000-03-22 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2000-0229 is a high vulnerability (CVSS 7.2) in Alessandro Rubini Gpm, published March 22, 2000. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.80%, the 56th percentile. No source names a fixed version.
References
redhat.com/support/errata/RHSA-2000-045.html
archives.neohapsis.com/archives/bugtraq/2000-03/0242.html
securityfocus.com/bid/1069
novell.com/linux/security/advisories/suse_security_announce_45.html
nvd.nist.gov/vuln/detail/CVE-2000-0229
github.com/advisories/GHSA-jj5p-pw57-256v