CVE-2000-0381

MediumCVSS 6.4/10Last modified Jun 16, 2026

Description

The Gossamer Threads DBMan db.cgi CGI script allows remote attackers to view environmental variables and setup information by referencing a non-existing database in the db parameter.

Metrics

CVSS 2.0 6.4/10AV:N/AC:L/Au:N/C:P/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

Timeline

Published: May 5, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-03822.6ColdFusion ClusterCATS appends stale query string arguments to a URL during HTML redirection, which may provide sensitive information to the CVE-2000-03835.0The file transfer component of AOL Instant Messenger (AIM) reveals the physical path of the transferred file to the remote recipient.CVE-2000-038410.0NetStructure 7110 and 7180 have undocumented accounts (servnow, root, and wizard) whose passwords are easily guessable from the NetStructure CVE-2000-03855.0FileMaker Pro 5 Web Companion allows remote attackers to bypass Field-Level database security restrictions via the XML publishing or email c CVE-2000-03867.5FileMaker Pro 5 Web Companion allows remote attackers to send anonymous or forged email.CVE-2000-03872.1The makelev program in the golddig game from the FreeBSD ports collection allows local users to overwrite arbitrary files.CVE-2000-038910.0Buffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root privileges.CVE-2000-039010.0Buffer overflow in krb425_conv_principal function in Kerberos 5 allows remote attackers to gain root privileges.CVE-2000-039110.0Buffer overflow in krshd in Kerberos 5 allows remote attackers to gain root privileges.CVE-2000-03927.2Buffer overflow in ksu in Kerberos 5 allows local users to gain root privileges.CVE-2000-03937.2The KDE kscd program does not drop privileges when executing a program specified in a user's SHELL environmental variable, which allows the CVE-2000-03945.0NetProwler 3.0 allows remote attackers to cause a denial of service by sending malformed IP packets that trigger NetProwler's Man-in-the-Mid