CVE-2000-0052: Mandrakesoft Mandrake Linux

High severity, CVSS 7.2. EPSS: 0.9% chance of exploitation in the next 30 days.

Red Hat userhelper program in the usermode package allows local users to gain root access via PAM and a .. (dot dot) attack.

Affected products

• Mandrakesoft Mandrake Linux: version 6.0 only; version 6.1 only
• Red Hat Linux: version 6.0 only; version 6.1 only
• Turbolinux Turbolinux: version 3.5b2 only; version 4.2 only; version 4.4 only; version 6.0.2 only

Published 2000-01-04. Last modified 2026-06-16.