CVE-2000-0614

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Tnef program in Linux systems allows remote attackers to overwrite arbitrary files via TNEF encoded compressed attachments which specify absolute path names for the decompressed output.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/vendor/2000-q3/0002.htmlExploit, Patch, Vendor Advisory
http://www.securityfocus.com/bid/1450Patch, Vendor Advisory
http://archives.neohapsis.com/archives/vendor/2000-q3/0002.htmlExploit, Patch, Vendor Advisory
http://www.securityfocus.com/bid/1450Patch, Vendor Advisory

Timeline

Published: Jul 10, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-06152.1LPRng 3.6.x improperly installs lpd as setuid root, which can allow local users to append lpd trace and logging messages to files.CVE-2000-06164.6Vulnerability in HP TurboIMAGE DBUTIL allows local users to gain additional privileges via DBUTIL.PUB.SYS.CVE-2000-06174.6Buffer overflow in xconq and cconq game programs on Red Hat Linux allows local users to gain additional privileges via long USER environment CVE-2000-06184.6Buffer overflow in xconq and cconq game programs on Red Hat Linux allows local users to gain additional privileges via long DISPLAY environm CVE-2000-06195.0Top Layer AppSwitch 2500 allows remote attackers to cause a denial of service via malformed ICMP packets.CVE-2000-06205.0libX11 X library allows remote attackers to cause a denial of service via a resource mask of 0, which causes libX11 to go into an infinite l CVE-2000-06217.5Microsoft Outlook 98 and 2000, and Outlook Express 4.0x and 5.0x, allow remote attackers to read files on the client's system via a malforme CVE-2000-062210.0Buffer overflow in Webfind CGI program in O'Reilly WebSite Professional web server 2.x allows remote attackers to execute arbitrary commands CVE-2000-062310.0Buffer overflow in O'Reilly WebSite Professional web server 2.4 and earlier allows remote attackers to execute arbitrary commands via a long CVE-2000-06247.5Buffer overflow in Winamp 2.64 and earlier allows remote attackers to execute arbitrary commands via a long #EXTINF: extension in the M3U pl CVE-2000-06254.6NetZero 3.0 and earlier uses weak encryption for storing a user's login information, which allows a local user to decrypt the password.CVE-2000-06265.0Buffer overflow in Alibaba web server allows remote attackers to cause a denial of service via a long GET request.