Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2000-0864

25
FAUCET Score

CVE-2000-0864 describes a race condition vulnerability in GNOME esound versions 0.2.19 and earlier, specifically during the creation of a Unix domain socket. This flaw allows a local attacker to manipulate file and directory permissions, potentially leading to privilege escalation through a symlink attack. Rated with a CVSS score of 6.2 (Medium), the vulnerability requires high attack complexity but can result in complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or Metasploit modules, an ExploitDB entry exists, and the CVE has garnered minimal community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
0.2.19CPE matchmatch criteria
cpe:2.3:a:gnome:esound:0.2.19:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

6.2MEDIUM

AV:L/AC:H/Au:N/C:C/I:C/A:C

Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
Access Vector
LOCAL
Access Complexity
HIGH
Authentication
NONE
Exploitability Score
1.9
Impact Score
10.0
CvssVersion
2.0

Exploit Intelligence

EPSS Score
0.69%
Probability of exploitation in next 30 days
EPSS Percentile
49.2%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
ExploitDB: EDB-20212 · Aug 31, 2000
This CVE's current EPSS score of 0.0069 is in the 84th percentile among its peer group of 1,595 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Advisories (1)

redhatCVE-2000-0864

security flaw

Aug 31, 2000

References

archives.neohapsis.com / archives/bugtraq/2000-09/0095.html
archives.neohapsis.com / archives/bugtraq/2000-09/0328.htm
archives.neohapsis.com / archives/bugtraq/2000-10/0118.html
archives.neohapsis.com / archives/freebsd/2000-08/0365.html
Vendor Advisory
exchange.xforce.ibmcloud.com / vulnerabilities/5213
debian.org / security/2000/20001008
novell.com / linux/security/advisories/esound_daemon_race_condition.html
redhat.com / support/errata/RHSA-2000-077.html
securityfocus.com / bid/1659
ExploitPatchVendor Advisory