CVE-2000-0338

MediumCVSS 5.5/10Last modified Jun 16, 2026

Description

Concurrent Versions Software (CVS) uses predictable temporary file names for locking, which allows local users to cause a denial of service by creating the lock directory before it is created for use by a legitimate CVS user.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-667

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/bid/1136Broken Link, Exploit, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26msg%3D20000423174038.A520%40clico.plBroken Link, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/1136Broken Link, Exploit, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26msg%3D20000423174038.A520%40clico.plBroken Link, Third Party Advisory, VDB Entry

Timeline

Published: Apr 23, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-03397.5ZoneAlarm 2.1.10 and earlier does not filter UDP packets with a source port of 67, which allows remote attackers to bypass the firewall rule CVE-2000-03407.2Buffer overflow in Gnomelib in SuSE Linux 6.3 allows local users to execute arbitrary commands via the DISPLAY environmental variable.CVE-2000-03415.0ATRIUM Cassandra NNTP Server 1.10 allows remote attackers to cause a denial of service via a long login name.CVE-2000-03427.5Eudora 4.x allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by using a .lnk file t CVE-2000-034310.0Buffer overflow in Sniffit 0.3.x with the -L logging option enabled allows remote attackers to execute arbitrary commands via a long MAIL FR CVE-2000-03445.0The knfsd NFS server in Linux kernel 2.2.x allows remote attackers to cause a denial of service via a negative size value.CVE-2000-03452.1The on-line help system options in Cisco routers allows non-privileged users without "enabled" access to obtain sensitive information via th CVE-2000-03465.0AppleShare IP 6.1 and later allows a remote attacker to read potentially sensitive information via an invalid range request to the web serve CVE-2000-03475.0Windows 95 and Windows 98 allow a remote attacker to cause a denial of service via a NetBIOS session request packet with a NULL source name.CVE-2000-034810.0A vulnerability in the Sendmail configuration file sendmail.cf as installed in SCO UnixWare 7.1.0 and earlier allows an attacker to gain roo CVE-2000-03495.0Vulnerability in the passthru driver in SCO UnixWare 7.1.0 allows an attacker to cause a denial of service.CVE-2000-03505.0A debugging feature in NetworkICE ICEcap 2.0.23 and earlier is enabled, which allows a remote attacker to bypass the weak authentication and