VULNERABILITY INTELLIGENCE
CVE-2000-0864
CVSS score6.2 MEDIUM
EPSS probability0.69%
CISA KEVNot currently listed
Published2000-11-14
Last modified2026-06-16
CVSS vectorAV:L/AC:H/Au:N/C:C/I:C/A:C
Description
Race condition in the creation of a Unix domain socket in GNOME esound 0.2.19 and earlier allows a local user to change the permissions of arbitrary files and directories, and gain additional privileges, via a symlink attack.
Weakness classification
- CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')