CVE-2000-0217

MediumCVSS 5.1/10Last modified Jun 16, 2026

Description

The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious xauth program.

Metrics

CVSS 2.0 5.1/10AV:N/AC:H/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published: Feb 24, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-02187.2Buffer overflow in Linux mount and umount allows local users to gain root privileges via a long relative pathname.CVE-2000-02197.2Red Hat 6.0 allows local users to gain root access by booting single user and hitting ^C at the password prompt.CVE-2000-02205.0ZoneAlarm sends sensitive system and network information in cleartext to the Zone Labs server if a user requests more information about an e CVE-2000-02215.0The Nautica Marlin bridge allows remote attackers to cause a denial of service via a zero length UDP packet to the SNMP port.CVE-2000-022210.0The installation for Windows 2000 does not activate the Administrator password until the system has rebooted, which allows remote attackers CVE-2000-02237.2Buffer overflow in the wmcdplay CD player program for the WindowMaker desktop allows local users to gain root privileges via a long paramete CVE-2000-02241.2ARCserve agent in SCO UnixWare 7.x allows local attackers to gain root privileges via a symlink attack.CVE-2000-02255.0The Pocsag POC32 program does not properly prevent remote users from accessing its server port, even if the option has been disabled.CVE-2000-02265.0IIS 4.0 allows attackers to cause a denial of service by requesting a large buffer in a POST or PUT command which consumes memory, aka the "CVE-2000-02272.1The Linux 2.2.x kernel does not restrict the number of Unix domain sockets as defined by the wmem_max parameter, which allows local users to CVE-2000-02285.0Microsoft Windows Media License Manager allows remote attackers to cause a denial of service by sending a malformed request that causes the CVE-2000-02297.2gpm-root in the gpm package does not properly drop privileges, which allows local users to gain privileges by starting a utility from gpm-ro