CVE-2000-0516

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

When configured to store configuration information in an LDAP directory, Shiva Access Manager 5.0.0 stores the root DN (Distinguished Name) name and password in cleartext in a file that is world readable, which allows local users to compromise the LDAP server.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published: Jun 6, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-05175.0Netscape 4.73 and earlier does not properly warn users about a potentially invalid certificate if the user has previously accepted the certi CVE-2000-05182.6Internet Explorer 4.x and 5.x does not properly verify all contents of an SSL certificate if a connection is made to the server via an image CVE-2000-05192.6Internet Explorer 4.x and 5.x does not properly re-validate an SSL certificate if the user establishes a new SSL session with the same serve CVE-2000-05207.2Buffer overflow in restore program 0.4b17 and earlier in dump package allows local users to execute arbitrary commands via a long tape name.CVE-2000-05215.0Savant web server allows remote attackers to read source code of CGI scripts via a GET request that does not include the HTTP version number CVE-2000-05225.0RSA ACE/Server allows remote attackers to cause a denial of service by flooding the server's authentication request port with UDP packets, w CVE-2000-052310.0Buffer overflow in the logging feature of EServ 2.9.2 and earlier allows an attacker to execute arbitrary commands via a long MKD command.CVE-2000-05245.0Microsoft Outlook and Outlook Express allow remote attackers to cause a denial of service by sending email messages with blank fields such a CVE-2000-052510.0OpenSSH does not properly drop privileges when the UseLogin option is enabled, which allows local users to execute arbitrary commands by pro CVE-2000-05265.0mailview.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack.CVE-2000-052710.0userreg.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters.CVE-2000-05285.0Net Tools PKI Server does not properly restrict access to remote attackers when the XUDA template files do not contain absolute pathnames fo