CVE-2000-0231: Halloween Linux

High severity, CVSS 7.2. EPSS: 0.8% chance of exploitation in the next 30 days.

Linux kreatecd trusts a user-supplied path that is used to find the cdrecord program, allowing local users to gain root privileges.

Affected products

• Halloween Halloween Linux: version 4.0 only
• Suse Suse Linux: version 6.0 only; version 6.1 only; version 6.2 only; version 6.3 only

Published 2000-03-16. Last modified 2026-06-16.