CVE-2000-0528

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Net Tools PKI Server does not properly restrict access to remote attackers when the XUDA template files do not contain absolute pathnames for other files.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2000-06/0166.htmlPatch, Vendor Advisory
http://www.osvdb.org/4353
http://www.securityfocus.com/bid/1364Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/4743
http://archives.neohapsis.com/archives/bugtraq/2000-06/0166.htmlPatch, Vendor Advisory
http://www.osvdb.org/4353
http://www.securityfocus.com/bid/1364Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/4743

Timeline

Published: Jun 19, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-05295.0Net Tools PKI Server allows remote attackers to cause a denial of service via a long HTTP request.CVE-2000-05307.2The KApplication class in the KDE 1.1.2 configuration file management capability allows local users to overwrite arbitrary files.CVE-2000-05312.1Linux gpm program allows local users to cause a denial of service by flooding the /dev/gpmctl device with STREAM sockets.CVE-2000-05327.5A FreeBSD patch for SSH on 2000-01-14 configures ssh to listen on port 722 as well as port 22, which might allow remote attackers to access CVE-2000-05337.2Vulnerability in cvconnect in SGI IRIX WorkShop allows local users to overwrite arbitrary files.CVE-2000-05344.6The apsfilter software in the FreeBSD ports package does not properly read user filter configurations, which allows local users to execute c CVE-2000-05355.0OpenSSL 0.9.4 and OpenSSH for FreeBSD do not properly check for the existence of the /dev/random or /dev/urandom devices, which are absent o CVE-2000-05367.5xinetd 2.1.8.x does not properly restrict connections if hostnames are used for access control and the connecting host does not have a rever CVE-2000-05377.2BRU backup software allows local users to append data to arbitrary files by specifying an alternate configuration file with the BRUEXECLOG e CVE-2000-05385.0ColdFusion Administrator for ColdFusion 4.5.1 and earlier allows remote attackers to cause a denial of service via a long login password.CVE-2000-05396.4Servlet examples in Allaire JRun 2.3.x allow remote attackers to obtain sensitive information, e.g. listing HttpSession ID's via the Session CVE-2000-05405.0JSP sample files in Allaire JRun 2.3.x allow remote attackers to access arbitrary files (e.g. via viewsource.jsp) or obtain configuration in