CVE-2000-0009

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

The bna_pass program in Optivity NETarchitect uses the PATH environmental variable for finding the "rm" program, which allows local users to execute arbitrary commands.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published: Dec 29, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-001010.0WebWho+ whois.cgi program allows remote attackers to execute commands via shell metacharacters in the TLD parameter.CVE-2000-00117.5Buffer overflow in AnalogX SimpleServer:WWW HTTP server allows remote attackers to execute commands via a long GET request.CVE-2000-001210.0Buffer overflow in w3-msql CGI program in miniSQL package allows remote attackers to execute commands.CVE-2000-00137.2IRIX soundplayer program allows local users to gain privileges by including shell metacharacters in a .wav file, which is executed via the m CVE-2000-00145.0Denial of service in Savant web server via a null character in the requested URL.CVE-2000-00154.6CascadeView TFTP server allows local users to gain privileges via a symlink attack.CVE-2000-00165.0Buffer overflow in Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service or execute commands via a long us CVE-2000-001710.0Buffer overflow in Linux linuxconf package allows remote attackers to gain root privileges via a long parameter.CVE-2000-00187.2wmmon in FreeBSD allows local users to gain privileges via the .wmmonrc configuration file.CVE-2000-00192.1IMail POP3 daemon uses weak encryption, which allows local users to read files.CVE-2000-00205.0DNS PRO allows remote attackers to conduct a denial of service via a large number of connections.CVE-2000-00215.0Lotus Domino HTTP server allows remote attackers to determine the real path of the server via a request to a non-existent script in /cgi-bin