CVE-2000-0364

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

screen and rxvt in Red Hat Linux 6.0 do not properly set the modes of tty devices, which allows local users to write to other ttys.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Jun 1, 1999
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-03654.6Red Hat Linux 6.0 installs the /dev/pts file system with insecure modes, which allows local users to write to other tty devices.CVE-2000-03662.1dump in Debian GNU/Linux 2.1 does not properly restore symlinks, which allows a local user to modify the ownership of arbitrary files.CVE-2000-03677.2Vulnerability in eterm 0.8.8 in Debian GNU/Linux allows an attacker to gain root privileges.CVE-2000-03682.1Classic Cisco IOS 9.1 and later allows attackers with access to the login prompt to obtain portions of the command history of previous usersCVE-2000-03695.0The IDENT server in Caldera Linux 2.3 creates multiple threads for each IDENT request, which allows remote attackers to cause a denial of seCVE-2000-037010.0The debug option in Caldera Linux smail allows remote attackers to execute commands via shell metacharacters in the -D option for the rmail CVE-2000-03711.2The libmediatool library used for the KDE mediatool allows local users to create arbitrary files via a symlink attack.CVE-2000-03727.2Vulnerability in Caldera rmt command in the dump package 0.4b4 allows a local user to gain root privileges.CVE-2000-03737.2Vulnerabilities in the KDE kvt terminal program allow local users to gain root privileges.CVE-2000-037410.0The default configuration of kdm in Caldera and Mandrake Linux, and possibly other distributions, allows XDMCP connections from any host, whCVE-2000-03752.1The kernel in FreeBSD 3.2 follows symbolic links when it creates core dump files, which allows local attackers to modify arbitrary files.CVE-2000-037610.0Buffer overflow in the HTTP proxy server for the i-drive Filo software allows remote attackers to execute arbitrary commands via a long HTTP
CVE-2000-0364: Medium severity, CVSS 4.6 | Vulnix