CVE-2000-0531

Description

Linux gpm program allows local users to cause a denial of service by flooding the /dev/gpmctl device with STREAM sockets.

Affected products

• caldera / openlinux2.3 – 2.3
• caldera / openlinux2.4 – 2.4
• caldera / openlinux_eserver2.3 – 2.3
• RedHat / linux6.0 – 6.0
• RedHat / linux6.1 – 6.1

Exploits & proofs of concept

• exploit-dbOpenLinux 2.3/2.4 / RedHat 6.0/6.1 / SCO eServer 2.3 - Denial of Serviceby FuckGpm

References

• MISChttp://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.10006201453090.1812-200000%40apollo.aci.com.pl
• MISChttp://www.securityfocus.com/bid/1377
• MISChttp://www.redhat.com/support/errata/RHSA-2000-045.html
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/5010
• MISChttp://archives.neohapsis.com/archives/bugtraq/2000-07/0409.html