CVE-2000-0462

LowCVSS 2.1/10Last modified Jun 16, 2026

Description

ftpd in NetBSD 1.4.2 does not properly parse entries in /etc/ftpchroot and does not chroot the specified users, which allows those users to access other files outside of their home directory.

Metrics

CVSS 2.0 2.1/10AV:L/AC:L/Au:N/C:P/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published: May 28, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-04635.0BeOS 5.0 allows remote attackers to cause a denial of service via fragmented TCP packets.CVE-2000-04647.6Internet Explorer 4.x and 5.x allows remote attackers to execute arbitrary commands via a buffer overflow in the ActiveX parameter parsing c CVE-2000-04655.1Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote attacker to rea CVE-2000-04667.2AIX cdmount allows local users to gain root privileges via shell metacharacters.CVE-2000-04677.2Buffer overflow in Linux splitvt 1.6.3 and earlier allows local users to gain root privileges via a long password in the screen locking func CVE-2000-04684.6man in HP-UX 10.20 and 11 allows local attackers to overwrite files via a symlink attack.CVE-2000-04695.1Selena Sol WebBanner 4.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack.CVE-2000-04707.5Allegro RomPager HTTP server allows remote attackers to cause a denial of service via a malformed authentication request.CVE-2000-04717.2Buffer overflow in ufsrestore in Solaris 8 and earlier allows local users to gain root privileges via a long pathname.CVE-2000-04723.6Buffer overflow in innd 2.2.2 allows remote attackers to execute arbitrary commands via a cancel request containing a long message ID.CVE-2000-04737.5Buffer overflow in AnalogX SimpleServer 1.05 allows a remote attacker to cause a denial of service via a long GET request for a program in t CVE-2000-04747.8Real Networks RealServer 7.x allows remote attackers to cause a denial of service via a malformed request for a page in the viewsource direc