CVE-2000-0318

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Atrium Mercur Mail Server 3.2 allows local attackers to read other user's email and create arbitrary files via a dot dot (..) attack.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published
Apr 21, 2000
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-03195.0mail.local in Sendmail 8.10.x does not properly identify the .\n string which identifies the end of message text, which allows a remote attaCVE-2000-03205.0Qpopper 2.53 and 3.0 does not properly identify the \n string which identifies the end of message text, which allows a remote attacker to caCVE-2000-03215.0Buffer overflow in IC Radius package allows a remote attacker to cause a denial of service via a long user name.CVE-2000-032210.0The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharCVE-2000-03237.6The Microsoft Jet database engine allows an attacker to modify text files via a database query, aka the "Text I-ISAM" vulnerability.CVE-2000-03245.0pcAnywhere 8.x and 9.0 allows remote attackers to cause a denial of service via a TCP SYN scan, e.g. by nmap.CVE-2000-03257.2The Microsoft Jet database engine allows an attacker to execute commands via a database query, aka the "VBA Shell" vulnerability.CVE-2000-03265.0Meeting Maker uses weak encryption (a polyalphabetic substitution cipher) for passwords, which allows remote attackers to sniff and decrypt CVE-2000-03277.6Microsoft Virtual Machine (VM) allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cCVE-2000-03285.0Windows NT 4.0 generates predictable random TCP initial sequence numbers (ISN), which allows remote attackers to perform spoofing and sessioCVE-2000-03295.1A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embedded script in an HTMLCVE-2000-03307.6The networking software in Windows 95 and Windows 98 allows remote attackers to execute commands via a long file name string, aka the "File