CVE-2000-0312

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

cron in OpenBSD 2.5 allows local users to gain root privileges via an argv[] that is not NULL terminated, which is passed to cron's fake popen function.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published: Mar 12, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-03134.6Vulnerability in OpenBSD 2.6 allows a local user to change interface media configurations.CVE-2000-03145.0traceroute in NetBSD 1.3.3 and Linux systems allows local users to flood other systems by providing traceroute with a large waittime (-w) op CVE-2000-03155.0traceroute in NetBSD 1.3.3 and Linux systems allows local unprivileged users to modify the source address of the packets, which could be use CVE-2000-03167.2Buffer overflow in Solaris 7 lp allows local users to gain root privileges via a long -d option.CVE-2000-03177.2Buffer overflow in Solaris 7 lpset allows local users to gain root privileges via a long -r option.CVE-2000-03187.5Atrium Mercur Mail Server 3.2 allows local attackers to read other user's email and create arbitrary files via a dot dot (..) attack.CVE-2000-03195.0mail.local in Sendmail 8.10.x does not properly identify the .\n string which identifies the end of message text, which allows a remote atta CVE-2000-03205.0Qpopper 2.53 and 3.0 does not properly identify the \n string which identifies the end of message text, which allows a remote attacker to ca CVE-2000-03215.0Buffer overflow in IC Radius package allows a remote attacker to cause a denial of service via a long user name.CVE-2000-032210.0The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metachar CVE-2000-03237.6The Microsoft Jet database engine allows an attacker to modify text files via a database query, aka the "Text I-ISAM" vulnerability.CVE-2000-03245.0pcAnywhere 8.x and 9.0 allows remote attackers to cause a denial of service via a TCP SYN scan, e.g. by nmap.