CVE-2000-0370

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

The debug option in Caldera Linux smail allows remote attackers to execute commands via shell metacharacters in the -D option for the rmail command.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published
Jan 29, 1999
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-03711.2The libmediatool library used for the KDE mediatool allows local users to create arbitrary files via a symlink attack.CVE-2000-03727.2Vulnerability in Caldera rmt command in the dump package 0.4b4 allows a local user to gain root privileges.CVE-2000-03737.2Vulnerabilities in the KDE kvt terminal program allow local users to gain root privileges.CVE-2000-037410.0The default configuration of kdm in Caldera and Mandrake Linux, and possibly other distributions, allows XDMCP connections from any host, whCVE-2000-03752.1The kernel in FreeBSD 3.2 follows symbolic links when it creates core dump files, which allows local attackers to modify arbitrary files.CVE-2000-037610.0Buffer overflow in the HTTP proxy server for the i-drive Filo software allows remote attackers to execute arbitrary commands via a long HTTPCVE-2000-03775.0The Remote Registry server in Windows NT 4.0 allows local authenticated users to cause a denial of service via a malformed request, which caCVE-2000-03787.2The pam_console PAM module in Linux systems performs a chown on various devices upon a user login, but an open file descriptor for those devCVE-2000-03793.6The Netopia R9100 router does not prevent authenticated users from modifying SNMP tables, even if the administrator has configured it to do CVE-2000-03807.1The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a denial of service by reqCVE-2000-03816.4The Gossamer Threads DBMan db.cgi CGI script allows remote attackers to view environmental variables and setup information by referencing a CVE-2000-03822.6ColdFusion ClusterCATS appends stale query string arguments to a URL during HTML redirection, which may provide sensitive information to the