CVE-2000-0308

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Insecure file permissions for Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 in SCO UnixWare 7.0.x and 2.1.3 allow an attacker to gain root privileges.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published: Mar 12, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-03092.1The i386 trace-trap handling in OpenBSD 2.4 with DDB enabled allows a local user to cause a denial of service.CVE-2000-03105.0IP fragment assembly in OpenBSD 2.4 allows a remote attacker to cause a denial of service by sending a large number of fragmented packets.CVE-2000-03112.1The Windows 2000 domain controller allows a malicious user to modify Active Directory information by modifying an unprotected attribute, aka CVE-2000-03127.2cron in OpenBSD 2.5 allows local users to gain root privileges via an argv[] that is not NULL terminated, which is passed to cron's fake pop CVE-2000-03134.6Vulnerability in OpenBSD 2.6 allows a local user to change interface media configurations.CVE-2000-03145.0traceroute in NetBSD 1.3.3 and Linux systems allows local users to flood other systems by providing traceroute with a large waittime (-w) op CVE-2000-03155.0traceroute in NetBSD 1.3.3 and Linux systems allows local unprivileged users to modify the source address of the packets, which could be use CVE-2000-03167.2Buffer overflow in Solaris 7 lp allows local users to gain root privileges via a long -d option.CVE-2000-03177.2Buffer overflow in Solaris 7 lpset allows local users to gain root privileges via a long -r option.CVE-2000-03187.5Atrium Mercur Mail Server 3.2 allows local attackers to read other user's email and create arbitrary files via a dot dot (..) attack.CVE-2000-03195.0mail.local in Sendmail 8.10.x does not properly identify the .\n string which identifies the end of message text, which allows a remote atta CVE-2000-03205.0Qpopper 2.53 and 3.0 does not properly identify the \n string which identifies the end of message text, which allows a remote attacker to ca