CVE-2000-0718: A race condition in MandrakeUpdate allows local users to modify RPM files while they are in the /tmp directory
CVE-2000-0718 is a low-severity flaw (CVSS 1.2) affecting mandrake linux. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
A race condition in MandrakeUpdate allows local users to modify RPM files while they are in the /tmp directory before they are installed.
Why this priority
- On your watchlist
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 1.2 (Low) |
| EPSS exploit chance | 0.3% (top 82%) |
| CISA exploited list | No |
| Published | 2000-10-20 |
| Last modified | 2026-06-16 |
Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2000-0718?
mandrake linux: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2000-0718 being exploited?
CVE-2000-0718 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2000-0718 affect?
CVE-2000-0718 affects mandrake linux. Severity is low (CVSS 1.2). A race condition in MandrakeUpdate allows local users to modify RPM files while they are in the /tmp directory before they are installed.
How urgent is CVE-2000-0718?
Priority 14/100. On your watchlist
Related CVEs
- CVE-2000-1042 HIGH 10.0 MITIGATE Buffer overflow in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allow
- CVE-2008-0595 MEDIUM 4.6 MITIGATE MITIGATE dbus-daemon in D-Bus before 1.0.3, and 1.1.x before 1.1.20, recognizes send_interface attributes in allow dire
- CVE-2007-6284 MEDIUM 5.0 MITIGATE MITIGATE The xmlCurrentChar function in libxml2 before 2.6.31 allows context-dependent attackers to cause a denial of s
- CVE-2007-0454 HIGH 7.5 DOWNGRADE MITIGATE Format string vulnerability in the afsacl.so VFS module in Samba 3.0.6 through 3.0.23d allows context-dependen
- CVE-2006-0745 HIGH 7.2 DOWNGRADE DOWNGRADE X.Org server (xorg-server) 1.0.0 and later, X11R6.9.0, and X11R7.0 inadvertently treats the address of the get