CVE-2000-0229: Alessandro Rubini Gpm

High severity, CVSS 7.2. EPSS: 0.8% chance of exploitation in the next 30 days.

gpm-root in the gpm package does not properly drop privileges, which allows local users to gain privileges by starting a utility from gpm-root.

Affected products

• Alessandro Rubini Gpm: version 1.18.1 only; version 1.19 only
• Debian Debian Linux: version 2.0 only; version 2.1 only; version 2.2 only
• Red Hat Linux: version 6.0 only; version 6.1 only; version 6.2 only
• Suse Suse Linux: version 5.3 only; version 6.0 only; version 6.1 only; version 6.2 only; version 6.3 only

Published 2000-03-22. Last modified 2026-06-16.