CVE-2000-0506

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 11.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2000-06-09 · updated 2026-06-16

Description

The "capabilities" feature in Linux before 2.2.16 allows local users to cause a denial of service or gain privileges by setting the capabilities to prevent a setuid program from dropping privileges, aka the "Linux kernel setuid/setcap vulnerability."

Affected products

Linux kernel: 2.0, 2.0.30, 2.0.33, 2.0.34, 2.0.35, 2.0.36 (+13)

References

http://archives.neohapsis.com/archives/bugtraq/2000-06/0062.html
http://archives.neohapsis.com/archives/bugtraq/2000-06/0063.html
http://www.redhat.com/support/errata/RHSA-2000-037.html
http://www.securityfocus.com/bid/1322
http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.21.0006090852340.3475-300000%40alfa.elzabsoft.pl
http://archives.neohapsis.com/archives/bugtraq/2000-06/0062.html
http://archives.neohapsis.com/archives/bugtraq/2000-06/0063.html
http://www.redhat.com/support/errata/RHSA-2000-037.html
http://www.securityfocus.com/bid/1322
http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.21.0006090852340.3475-300000%40alfa.elzabsoft.pl

Get alerted when CVE-2000-0506 or the next vulnerability affects your stack