CVE-2000-0348

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

A vulnerability in the Sendmail configuration file sendmail.cf as installed in SCO UnixWare 7.1.0 and earlier allows an attacker to gain root privileges.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

Timeline

Published: Mar 12, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-03495.0Vulnerability in the passthru driver in SCO UnixWare 7.1.0 allows an attacker to cause a denial of service.CVE-2000-03505.0A debugging feature in NetworkICE ICEcap 2.0.23 and earlier is enabled, which allows a remote attacker to bypass the weak authentication and CVE-2000-03514.6Some packaging commands in SCO UnixWare 7.1.0 have insecure privileges, which allows local users to add or remove software packages.CVE-2000-035210.0Pine before version 4.21 does not properly filter shell metacharacters from URLs, which allows remote attackers to execute arbitrary command CVE-2000-035310.0Pine 4.x allows a remote attacker to execute arbitrary commands via an index.html file which executes lynx and obtains a uudecoded file from CVE-2000-03545.0mirror 2.8.x in Linux systems allows remote attackers to create files one level above the local target directory.CVE-2000-03557.5pg and pb in SuSE pbpg 1.x package allows an attacker to read arbitrary files.CVE-2000-03564.6Pluggable Authentication Modules (PAM) in Red Hat Linux 6.1 does not properly lock access to disabled NIS accounts.CVE-2000-03577.5ORBit and esound in Red Hat Linux 6.1 do not use sufficiently random numbers, which allows local users to guess the authentication keys.CVE-2000-03585.0ORBit and gnome-session in Red Hat Linux 6.1 allows remote attackers to crash a program.CVE-2000-035910.0Buffer overflow in Trivial HTTP (THTTPd) allows remote attackers to cause a denial of service or execute arbitrary commands via a long If-Mo CVE-2000-03605.0Buffer overflow in INN 2.2.1 and earlier allows remote attackers to cause a denial of service via a maliciously formatted article.