CVE-2000-0368

LowCVSS 2.1/10Last modified Jun 16, 2026

Description

Classic Cisco IOS 9.1 and later allows attackers with access to the login prompt to obtain portions of the command history of previous users, which may allow the attacker to access sensitive data.

Metrics

CVSS 2.0 2.1/10AV:L/AC:L/Au:N/C:P/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.ciac.org/ciac/bulletins/j-009.shtmlPatch, Vendor Advisory
http://www.cisco.com/warp/public/770/ioshist-pub.shtmlPatch, Vendor Advisory
http://www.ciac.org/ciac/bulletins/j-009.shtmlPatch, Vendor Advisory
http://www.cisco.com/warp/public/770/ioshist-pub.shtmlPatch, Vendor Advisory

Timeline

Published: Mar 12, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-03695.0The IDENT server in Caldera Linux 2.3 creates multiple threads for each IDENT request, which allows remote attackers to cause a denial of se CVE-2000-037010.0The debug option in Caldera Linux smail allows remote attackers to execute commands via shell metacharacters in the -D option for the rmail CVE-2000-03711.2The libmediatool library used for the KDE mediatool allows local users to create arbitrary files via a symlink attack.CVE-2000-03727.2Vulnerability in Caldera rmt command in the dump package 0.4b4 allows a local user to gain root privileges.CVE-2000-03737.2Vulnerabilities in the KDE kvt terminal program allow local users to gain root privileges.CVE-2000-037410.0The default configuration of kdm in Caldera and Mandrake Linux, and possibly other distributions, allows XDMCP connections from any host, wh CVE-2000-03752.1The kernel in FreeBSD 3.2 follows symbolic links when it creates core dump files, which allows local attackers to modify arbitrary files.CVE-2000-037610.0Buffer overflow in the HTTP proxy server for the i-drive Filo software allows remote attackers to execute arbitrary commands via a long HTTP CVE-2000-03775.0The Remote Registry server in Windows NT 4.0 allows local authenticated users to cause a denial of service via a malformed request, which ca CVE-2000-03787.2The pam_console PAM module in Linux systems performs a chown on various devices upon a user login, but an open file descriptor for those dev CVE-2000-03793.6The Netopia R9100 router does not prevent authenticated users from modifying SNMP tables, even if the administrator has configured it to do CVE-2000-03807.1The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a denial of service by req