CVE-2000-0293

LowCVSS 2.1/10Last modified Jun 16, 2026

Description

aaa_base in SuSE Linux 6.3, and cron.daily in earlier versions, allow local users to delete arbitrary files by creating files whose names include spaces, which are then incorrectly interpreted by aaa_base when it deletes expired files from the /tmp directory.

Metrics

CVSS 2.0 2.1/10AV:L/AC:L/Au:N/C:N/I:P/A:N

Affected software

No affected versions have been published.

Timeline

Published
May 2, 2000
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-02947.2Buffer overflow in healthd for FreeBSD allows local users to gain root privileges.CVE-2000-029510.0Buffer overflow in LCDproc allows remote attackers to gain root privileges via the screen_add command.CVE-2000-02967.2fcheck allows local users to gain privileges by embedding shell metacharacters into file names that are processed by fcheck.CVE-2000-02976.4Allaire Forums 2.0.5 allows remote attackers to bypass access restrictions to secure conferences via the rightAccessAllForums or rightModeraCVE-2000-02987.2The unattended installation of Windows 2000 with the OEMPreinstall option sets insecure permissions for the All Users and Default Users direCVE-2000-02995.0Buffer overflow in WebObjects.exe in the WebObjects Developer 4.5 package allows remote attackers to cause a denial of service via an HTTP rCVE-2000-030010.0The default encryption method of PcAnywhere 9.x uses weak encryption, which allows remote attackers to sniff and decrypt PcAnywhere or NT doCVE-2000-03015.0Ipswitch IMAIL server 6.02 and earlier allows remote attackers to cause a denial of service via the AUTH CRAM-MD5 command.CVE-2000-03025.0Microsoft Index Server allows remote attackers to view the source code of ASP files by appending a %20 to the filename in the CiWebHitsFile CVE-2000-03036.4Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot (..) attack.CVE-2000-03045.0Microsoft IIS 4.0 and 5.0 with the IISADMPWD virtual directory installed allows a remote attacker to cause a denial of service via a malformCVE-2000-03057.8Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a denial of service by se