CVE-2000-0595

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

libedit searches for the .editrc file in the current directory instead of the user's home directory, which may allow local users to execute arbitrary commands by installing a modified .editrc in another directory.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/freebsd/2000-07/0035.htmlExploit, Patch, Vendor Advisory
http://www.osvdb.org/1446
http://www.securityfocus.com/bid/1437Exploit, Patch, Vendor Advisory
http://archives.neohapsis.com/archives/freebsd/2000-07/0035.htmlExploit, Patch, Vendor Advisory
http://www.osvdb.org/1446
http://www.securityfocus.com/bid/1437Exploit, Patch, Vendor Advisory

Timeline

Published: Jul 5, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-05967.5Internet Explorer 5.x does not warn a user before opening a Microsoft Access database file that is referenced within ActiveX OBJECT tags in CVE-2000-05977.5Microsoft Office 2000 (Excel and PowerPoint) and PowerPoint 97 are marked as safe for scripting, which allows remote attackers to force Inte CVE-2000-05985.0Fortech Proxy+ allows remote attackers to bypass access restrictions for to the administration service by redirecting their connections thro CVE-2000-05997.5Buffer overflow in iMesh 1.02 allows remote attackers to execute arbitrary commands via a long string to the iMesh port.CVE-2000-06007.5Netscape Enterprise Server in NetWare 5.1 allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed CVE-2000-06015.0LeafChat 1.7 IRC client allows a remote IRC server to cause a denial of service by rapidly sending a large amount of error messages.CVE-2000-06024.6Secure Locate (slocate) in Red Hat Linux allows local users to gain privileges via a malformed configuration file that is specified in the L CVE-2000-06034.6Microsoft SQL Server 7.0 allows a local user to bypass permissions for stored procedures by referencing them via a temporary stored procedur CVE-2000-06044.6gkermit in Red Hat Linux is improperly installed with setgid uucp, which allows local users to modify files owned by uucp.CVE-2000-06052.1Blackboard CourseInfo 4.0 stores the local and SQL administrator user names and passwords in cleartext in a registry key whose access contro CVE-2000-06067.2Buffer overflow in kon program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges via a long -StartupM CVE-2000-06077.2Buffer overflow in fld program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges via an input file co