CVE-2000-0371

LowCVSS 1.2/10Last modified Jun 16, 2026

Description

The libmediatool library used for the KDE mediatool allows local users to create arbitrary files via a symlink attack.

Metrics

CVSS 2.0 1.2/10AV:L/AC:H/Au:N/C:N/I:P/A:N

Affected software

No affected versions have been published.

Timeline

Published
Mar 1, 1999
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-03727.2Vulnerability in Caldera rmt command in the dump package 0.4b4 allows a local user to gain root privileges.CVE-2000-03737.2Vulnerabilities in the KDE kvt terminal program allow local users to gain root privileges.CVE-2000-037410.0The default configuration of kdm in Caldera and Mandrake Linux, and possibly other distributions, allows XDMCP connections from any host, whCVE-2000-03752.1The kernel in FreeBSD 3.2 follows symbolic links when it creates core dump files, which allows local attackers to modify arbitrary files.CVE-2000-037610.0Buffer overflow in the HTTP proxy server for the i-drive Filo software allows remote attackers to execute arbitrary commands via a long HTTPCVE-2000-03775.0The Remote Registry server in Windows NT 4.0 allows local authenticated users to cause a denial of service via a malformed request, which caCVE-2000-03787.2The pam_console PAM module in Linux systems performs a chown on various devices upon a user login, but an open file descriptor for those devCVE-2000-03793.6The Netopia R9100 router does not prevent authenticated users from modifying SNMP tables, even if the administrator has configured it to do CVE-2000-03807.1The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a denial of service by reqCVE-2000-03816.4The Gossamer Threads DBMan db.cgi CGI script allows remote attackers to view environmental variables and setup information by referencing a CVE-2000-03822.6ColdFusion ClusterCATS appends stale query string arguments to a URL during HTML redirection, which may provide sensitive information to theCVE-2000-03835.0The file transfer component of AOL Instant Messenger (AIM) reveals the physical path of the transferred file to the remote recipient.
CVE-2000-0371: Low severity, CVSS 1.2 | Vulnix