CVE-2000-0433
MediumExploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
The aaa_base package in SuSE installs some system accounts with home directories set to /tmp, allowing local users to gain privileges to those accounts by creating standard user startup scripts such as profiles.
Risk Assessment
Local users may gain unauthorized access to system accounts, potentially leading to privilege escalation and security breaches.
Recommendation
It is recommended to change the home directories for system accounts to more secure locations and review and update the configuration of the aaa_base package.
Original NVD description (English source)
The SuSE aaa_base package installs some system accounts with home directories set to /tmp, which allows local users to gain privileges to those accounts by creating standard user startup scripts such as profiles.