CVE-2000-0052

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

Red Hat userhelper program in the usermode package allows local users to gain root access via PAM and a .. (dot dot) attack.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Jan 4, 2000
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-00537.5Microsoft Commercial Internet System (MCIS) IMAP server allows remote attackers to cause a denial of service via a malformed IMAP request.CVE-2000-00545.0search.cgi in the SolutionScripts Home Free package allows remote attackers to view directories via a .. (dot dot) attack.CVE-2000-00557.2Buffer overflow in Solaris chkperm command allows local users to gain root access via a long -n option.CVE-2000-00565.0IMail IMONITOR status.cgi CGI script allows remote attackers to cause a denial of service with many calls to status.cgi.CVE-2000-00577.5Cold Fusion CFCACHE tag places temporary cache files within the web document root, allowing remote attackers to obtain sensitive system infoCVE-2000-00585.0Network HotSync program in Handspring Visor does not have authentication, which allows remote attackers to retrieve email and files.CVE-2000-005910.0PHP3 with safe_mode enabled does not properly filter shell metacharacters from commands that are executed by popen, which could allow remoteCVE-2000-00605.0Buffer overflow in aVirt Rover POP3 server 1.1 allows remote attackers to cause a denial of service via a long user name.CVE-2000-006110.0Internet Explorer 5 does not modify the security zone for a document that is being loaded into a window until after the document has been loCVE-2000-006210.0The DTML implementation in the Z Object Publishing Environment (Zope) allows remote attackers to conduct unauthorized activities.CVE-2000-00635.0cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to read arbitrary files by specifying the filename in a parameterCVE-2000-00645.0cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to cause a denial of service via a malformed URL that includes sh
CVE-2000-0052: High severity, CVSS 7.2 | Vulnix