CVE-2000-0691

LowCVSS 2.1/10Last modified Jun 16, 2026

Description

The faxrunq and faxrunqd in the mgetty package allows local users to create or modify arbitrary files via a symlink attack which creates a symlink in from /var/spool/fax/outgoing/.last_run to the target file.

Metrics

CVSS 2.0 2.1/10AV:L/AC:L/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2000-08/0329.htmlExploit, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2000-08/0330.html
http://www.calderasystems.com/support/security/advisories/CSSA-2000-029.0.txtPatch, Vendor Advisory
http://www.securityfocus.com/bid/1612Exploit, Patch, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2000-08/0329.htmlExploit, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2000-08/0330.html
http://www.calderasystems.com/support/security/advisories/CSSA-2000-029.0.txtPatch, Vendor Advisory
http://www.securityfocus.com/bid/1612Exploit, Patch, Vendor Advisory

Timeline

Published: Oct 20, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-06925.0ISS RealSecure 3.2.1 and 3.2.2 allows remote attackers to cause a denial of service via a flood of fragmented packets with the SYN flag set.CVE-2000-06937.2pgxconfig in the Raptor GFX configuration tool uses a relative path name for a system call to the "cp" program, which allows local users to CVE-2000-06947.2pgxconfig in the Raptor GFX configuration tool allows local users to gain privileges via a symlink attack.CVE-2000-06957.2Buffer overflows in pgxconfig in the Raptor GFX configuration tool allow local users to gain privileges via command line options.CVE-2000-06967.5The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests to its supporting CGI CVE-2000-069710.0The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execute commands via shell CVE-2000-06985.0Minicom 1.82.1 and earlier on some Linux systems allows local users to create arbitrary files owned by the uucp user via a symlink attack.CVE-2000-069910.0Format string vulnerability in ftpd in HP-UX 10.20 allows remote attackers to cause a denial of service or execute arbitrary commands via fo CVE-2000-07005.0Cisco Gigabit Switch Routers (GSR) with Fast Ethernet / Gigabit Ethernet cards, from IOS versions 11.2(15)GS1A up to 11.2(19)GS0.2 and some CVE-2000-07014.6The wrapper program in mailman 2.0beta3 and 2.0beta4 does not properly cleanse untrusted format strings, which allows local users to gain pr CVE-2000-07027.2The net.init rc script in HP-UX 11.00 (S008net.init) allows local users to overwrite arbitrary files via a symlink attack that points from /CVE-2000-07037.2suidperl (aka sperl) does not properly cleanse the escape sequence "~!" before calling /bin/mail to send an error report, which allows local