CVE-2000-0366

LowCVSS 2.1/10Last modified Jun 16, 2026

Description

dump in Debian GNU/Linux 2.1 does not properly restore symlinks, which allows a local user to modify the ownership of arbitrary files.

Metrics

CVSS 2.0 2.1/10AV:L/AC:L/Au:N/C:N/I:P/A:N

Affected software

No affected versions have been published.

Timeline

Published
Dec 2, 1999
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-03677.2Vulnerability in eterm 0.8.8 in Debian GNU/Linux allows an attacker to gain root privileges.CVE-2000-03682.1Classic Cisco IOS 9.1 and later allows attackers with access to the login prompt to obtain portions of the command history of previous usersCVE-2000-03695.0The IDENT server in Caldera Linux 2.3 creates multiple threads for each IDENT request, which allows remote attackers to cause a denial of seCVE-2000-037010.0The debug option in Caldera Linux smail allows remote attackers to execute commands via shell metacharacters in the -D option for the rmail CVE-2000-03711.2The libmediatool library used for the KDE mediatool allows local users to create arbitrary files via a symlink attack.CVE-2000-03727.2Vulnerability in Caldera rmt command in the dump package 0.4b4 allows a local user to gain root privileges.CVE-2000-03737.2Vulnerabilities in the KDE kvt terminal program allow local users to gain root privileges.CVE-2000-037410.0The default configuration of kdm in Caldera and Mandrake Linux, and possibly other distributions, allows XDMCP connections from any host, whCVE-2000-03752.1The kernel in FreeBSD 3.2 follows symbolic links when it creates core dump files, which allows local attackers to modify arbitrary files.CVE-2000-037610.0Buffer overflow in the HTTP proxy server for the i-drive Filo software allows remote attackers to execute arbitrary commands via a long HTTPCVE-2000-03775.0The Remote Registry server in Windows NT 4.0 allows local authenticated users to cause a denial of service via a malformed request, which caCVE-2000-03787.2The pam_console PAM module in Linux systems performs a chown on various devices upon a user login, but an open file descriptor for those dev
CVE-2000-0366: Low severity, CVSS 2.1 | Vulnix