CVE-2000-0617

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

Buffer overflow in xconq and cconq game programs on Red Hat Linux allows local users to gain additional privileges via long USER environmental variable.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2000-06/0222.htmlVendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2000-06/0222.htmlVendor Advisory

Timeline

Published: Jun 22, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-06184.6Buffer overflow in xconq and cconq game programs on Red Hat Linux allows local users to gain additional privileges via long DISPLAY environm CVE-2000-06195.0Top Layer AppSwitch 2500 allows remote attackers to cause a denial of service via malformed ICMP packets.CVE-2000-06205.0libX11 X library allows remote attackers to cause a denial of service via a resource mask of 0, which causes libX11 to go into an infinite l CVE-2000-06217.5Microsoft Outlook 98 and 2000, and Outlook Express 4.0x and 5.0x, allow remote attackers to read files on the client's system via a malforme CVE-2000-062210.0Buffer overflow in Webfind CGI program in O'Reilly WebSite Professional web server 2.x allows remote attackers to execute arbitrary commands CVE-2000-062310.0Buffer overflow in O'Reilly WebSite Professional web server 2.4 and earlier allows remote attackers to execute arbitrary commands via a long CVE-2000-06247.5Buffer overflow in Winamp 2.64 and earlier allows remote attackers to execute arbitrary commands via a long #EXTINF: extension in the M3U pl CVE-2000-06254.6NetZero 3.0 and earlier uses weak encryption for storing a user's login information, which allows a local user to decrypt the password.CVE-2000-06265.0Buffer overflow in Alibaba web server allows remote attackers to cause a denial of service via a long GET request.CVE-2000-06277.5BlackBoard CourseInfo 4.0 does not properly authenticate users, which allows local users to modify CourseInfo database information and gain CVE-2000-06287.5The source.asp example script in the Apache ASP module Apache::ASP 1.93 and earlier allows remote attackers to modify files.CVE-2000-06297.5The default configuration of the Sun Java web server 2.0 and earlier allows remote attackers to execute arbitrary commands by uploading Java