CVE-2000-0093

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

An installation of Red Hat uses DES password encryption with crypt() for the initial password, instead of md5.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published
Jan 21, 2000
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-00947.2procfs in BSD systems allows local users to gain root privileges by modifying the /proc/pid/mem interface via a modified file descriptor forCVE-2000-00955.0The PMTU discovery procedure used by HP-UX 10.30 and 11.00 for determining the optimum MTU generates large amounts of traffic in response toCVE-2000-00967.2Buffer overflow in qpopper 3.0 beta versions allows local users to gain privileges via a long LIST command.CVE-2000-00975.0The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting ArguCVE-2000-00985.0Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file tCVE-2000-00997.2Buffer overflow in UnixWare ppptalk command allows local users to gain privileges via a long prompt argument.CVE-2000-01007.2The SMS Remote Control program is installed with insecure permissions, which allows local users to gain privileges by modifying or replacingCVE-2000-01017.5The Make-a-Store OrderPage shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.CVE-2000-01027.5The SalesCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.CVE-2000-01037.5The SmartCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.CVE-2000-01047.5The Shoptron shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.CVE-2000-01055.0Outlook Express 5.01 and Internet Explorer 5.01 allow remote attackers to view a user's email messages via a script that accesses a variable