CVE-2000-0143

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

The SSH protocol server sshd allows local users without shell access to redirect a TCP connection through a service that uses the standard system password database for authentication, such as POP or FTP.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published: Feb 11, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-01447.5Axis 700 Network Scanner does not properly restrict access to administrator URLs, which allows users to bypass the password protection via a CVE-2000-01457.5The libguile.so library file used by gnucash in Debian GNU/Linux is installed with world-writable permissions.CVE-2000-01465.0The Java Server in the Novell GroupWise Web Access Enhancement Pack allows remote attackers to cause a denial of service via a long URL to t CVE-2000-01472.1snmpd in SCO OpenServer has an SNMP community string that is writable by default, which allows local attackers to modify the host's configur CVE-2000-01487.5MySQL 3.22 allows remote attackers to bypass password authentication and access a database via a short check string.CVE-2000-01495.0Zeus web server allows remote attackers to view the source code for CGI programs via a null character (%00) at the end of a URL.CVE-2000-01507.5Check Point Firewall-1 allows remote attackers to bypass port access restrictions on an FTP server by forcing it to send malicious packets t CVE-2000-01516.2GNU make follows symlinks when it reads a Makefile from stdin, which allows other local users to execute commands.CVE-2000-01525.0Remote attackers can cause a denial of service in Novell BorderManager 3.5 by pressing the enter key in a telnet connection to port 2000.CVE-2000-01535.0FrontPage Personal Web Server (PWS) allows remote attackers to read files via a .... (dot dot) attack.CVE-2000-01541.2The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack.CVE-2000-01557.2Windows NT Autorun executes the autorun.inf file on non-removable media, which allows local attackers to specify an alternate program to exe