CVE-2000-0374

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

The default configuration of kdm in Caldera and Mandrake Linux, and possibly other distributions, allows XDMCP connections from any host, which allows remote attackers to obtain sensitive information or bypass additional access restrictions.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published: Aug 22, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-03752.1The kernel in FreeBSD 3.2 follows symbolic links when it creates core dump files, which allows local attackers to modify arbitrary files.CVE-2000-037610.0Buffer overflow in the HTTP proxy server for the i-drive Filo software allows remote attackers to execute arbitrary commands via a long HTTP CVE-2000-03775.0The Remote Registry server in Windows NT 4.0 allows local authenticated users to cause a denial of service via a malformed request, which ca CVE-2000-03787.2The pam_console PAM module in Linux systems performs a chown on various devices upon a user login, but an open file descriptor for those dev CVE-2000-03793.6The Netopia R9100 router does not prevent authenticated users from modifying SNMP tables, even if the administrator has configured it to do CVE-2000-03807.1The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a denial of service by req CVE-2000-03816.4The Gossamer Threads DBMan db.cgi CGI script allows remote attackers to view environmental variables and setup information by referencing a CVE-2000-03822.6ColdFusion ClusterCATS appends stale query string arguments to a URL during HTML redirection, which may provide sensitive information to the CVE-2000-03835.0The file transfer component of AOL Instant Messenger (AIM) reveals the physical path of the transferred file to the remote recipient.CVE-2000-038410.0NetStructure 7110 and 7180 have undocumented accounts (servnow, root, and wizard) whose passwords are easily guessable from the NetStructure CVE-2000-03855.0FileMaker Pro 5 Web Companion allows remote attackers to bypass Field-Level database security restrictions via the XML publishing or email c CVE-2000-03867.5FileMaker Pro 5 Web Companion allows remote attackers to send anonymous or forged email.