CVE-2000-0392

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

Buffer overflow in ksu in Kerberos 5 allows local users to gain root privileges.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published
May 16, 2000
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-03937.2The KDE kscd program does not drop privileges when executing a program specified in a user's SHELL environmental variable, which allows the CVE-2000-03945.0NetProwler 3.0 allows remote attackers to cause a denial of service by sending malformed IP packets that trigger NetProwler's Man-in-the-MidCVE-2000-03955.0Buffer overflow in CProxy 3.3 allows remote users to cause a denial of service via a long HTTP request.CVE-2000-03965.0The add.exe program in the Carello shopping cart software allows remote attackers to duplicate files on the server, which could allow the atCVE-2000-03975.0The EMURL web-based email account software encodes predictable identifiers in user session URLs, which allows a remote attacker to access a CVE-2000-039810.0Buffer overflow in wconsole.dll in Rockliffe MailSite Management Agent allows remote attackers to execute arbitrary commands via a long querCVE-2000-03995.0Buffer overflow in MDaemon POP server allows remote attackers to cause a denial of service via a long user name.CVE-2000-04007.5The Microsoft Active Movie ActiveX Control in Internet Explorer 5 does not restrict which file types can be downloaded, which allows an attaCVE-2000-04017.5Buffer overflows in redirect.exe and changepw.exe in PDGSoft shopping cart allow remote attackers to execute arbitrary commands via a long qCVE-2000-04022.1The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in plaintext in a log fileCVE-2000-04035.0The CIFS Computer Browser service on Windows NT 4.0 allows a remote attacker to cause a denial of service by sending a large number of host CVE-2000-04045.0The CIFS Computer Browser service allows remote attackers to cause a denial of service by sending a ResetBrowser frame to the Master Browser
CVE-2000-0392: High severity, CVSS 7.2 | Vulnix