CVE-2000-0565

LowCVSS 2.1/10Last modified Jun 16, 2026

Description

SmartFTP Daemon 0.2 allows a local user to access arbitrary files by uploading and specifying an alternate user configuration file via a .. (dot dot) attack.

Metrics

CVSS 2.0 2.1/10AV:L/AC:L/Au:N/C:P/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
Jun 13, 2000
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-05667.2makewhatis in Linux man package allows local users to overwrite files via a symlink attack.CVE-2000-05675.0Buffer overflow in Microsoft Outlook and Outlook Express allows remote attackers to execute arbitrary commands via a long Date field in an eCVE-2000-05685.0Sybergen Secure Desktop 2.1 does not properly protect against false router advertisements (ICMP type 9), which allows remote attackers to moCVE-2000-05695.0Sybergen Sygate allows remote attackers to cause a denial of service by sending a malformed DNS UDP packet to its internal interface.CVE-2000-05705.0FirstClass Internet Services server 5.770, and other versions before 6.1, allows remote attackers to cause a denial of service by sending anCVE-2000-05716.4LocalWEB HTTP server 1.2.0 allows remote attackers to cause a denial of service via a long GET request.CVE-2000-05724.6The Razor configuration management tool uses weak encryption for its password file, which allows local users to gain privileges.CVE-2000-057310.0The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to execCVE-2000-05745.0FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the seCVE-2000-05757.2SSH 1.2.27 with Kerberos authentication support stores Kerberos tickets in a file which is created in the current directory of the user who CVE-2000-05765.0Oracle Web Listener for AIX versions 4.0.7.0.0 and 4.0.8.1.0 allows remote attackers to cause a denial of service via a malformed URL.CVE-2000-057710.0Netscape Professional Services FTP Server 1.3.6 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVE-2000-0565: Low severity, CVSS 2.1 | Vulnix