CVE-2000-0229

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

gpm-root in the gpm package does not properly drop privileges, which allows local users to gain privileges by starting a utility from gpm-root.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published
Mar 22, 2000
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-02307.2Buffer overflow in imwheel allows local users to gain root privileges via the imwheel-solo script and a long HOME environmental variable.CVE-2000-02317.2Linux kreatecd trusts a user-supplied path that is used to find the cdrecord program, allowing local users to gain root privileges.CVE-2000-02322.1Microsoft TCP/IP Printing Services, aka Print Services for Unix, allows an attacker to cause a denial of service via a malformed TCP/IP prinCVE-2000-023310.0SuSE Linux IMAP server allows remote attackers to bypass IMAP authentication and gain privileges.CVE-2000-02345.0The default configuration of Cobalt RaQ2 and RaQ3 as specified in access.conf allows remote attackers to view sensitive contents of a .htaccCVE-2000-02357.2Buffer overflow in the huh program in the orville-write package allows local users to gain root privileges.CVE-2000-02365.0Netscape Enterprise Server with Directory Indexing enabled allows remote attackers to list server directories via web publishing tags such aCVE-2000-02376.4Netscape Enterprise Server with Web Publishing enabled allows remote attackers to list arbitrary directories via a GET request for the /publCVE-2000-02385.0Buffer overflow in the web server for Norton AntiVirus for Internet Email Gateways allows remote attackers to cause a denial of service via CVE-2000-02395.0Buffer overflow in the MERCUR WebView WebMail server allows remote attackers to cause a denial of service via a long mail_user parameter in CVE-2000-02405.0vqSoft vqServer program allows remote attackers to read arbitrary files via a /........../ in the URL, a variation of a .. (dot dot) attack.CVE-2000-02415.0vqSoft vqServer stores sensitive information such as passwords in cleartext in the server.cfg file, which allows attackers to gain privilege