First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2000-0679

LowCVSS 2.1/10Last modified Jun 16, 2026

Description

The CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server to force the client to create arbitrary files.

Metrics

CVSS 2.0 2.1/10AV:L/AC:L/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

Timeline

Published: Oct 20, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-06807.2The CVS 1.10.8 server does not properly restrict users from creating arbitrary Checkin.prog or Update.prog programs, which allows remote CVS CVE-2000-068110.0Buffer overflow in BEA WebLogic server proxy plugin allows remote attackers to execute arbitrary commands via a long URL with a .JSP extensi CVE-2000-06825.0BEA WebLogic 5.1.x allows remote attackers to read source code for parsed pages by inserting /ConsoleHelp/ into the URL, which invokes the F CVE-2000-06835.0BEA WebLogic 5.1.x allows remote attackers to read source code for parsed pages by inserting /*.shtml/ into the URL, which invokes the SSISe CVE-2000-068410.0BEA WebLogic 5.1.x does not properly restrict access to the JSPServlet, which could allow remote attackers to compile and execute Java JSP c CVE-2000-068510.0BEA WebLogic 5.1.x does not properly restrict access to the PageCompileServlet, which could allow remote attackers to compile and execute Ja CVE-2000-06865.0Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the fromfile paramet CVE-2000-068710.0Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the catdir parameter CVE-2000-06887.5Subscribe Me LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privil CVE-2000-06897.5Account Manager LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain pri CVE-2000-069010.0Auction Weaver CGI script 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the fromfile pa CVE-2000-06912.1The faxrunq and faxrunqd in the mgetty package allows local users to create or modify arbitrary files via a symlink attack which creates a s

CVE-2000-0679: Low severity, CVSS 2.1 | Vulnix