CVE-2000-0693

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

pgxconfig in the Raptor GFX configuration tool uses a relative path name for a system call to the "cp" program, which allows local users to execute arbitrary commands by modifying their path to point to an alternate "cp" program.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2000-07/0463.htmlExploit, Vendor Advisory
http://www.osvdb.org/1501
http://www.securityfocus.com/bid/1563Exploit, Patch, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2000-07/0463.htmlExploit, Vendor Advisory
http://www.osvdb.org/1501
http://www.securityfocus.com/bid/1563Exploit, Patch, Vendor Advisory

Timeline

Published: Oct 20, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-06947.2pgxconfig in the Raptor GFX configuration tool allows local users to gain privileges via a symlink attack.CVE-2000-06957.2Buffer overflows in pgxconfig in the Raptor GFX configuration tool allow local users to gain privileges via command line options.CVE-2000-06967.5The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests to its supporting CGI CVE-2000-069710.0The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execute commands via shell CVE-2000-06985.0Minicom 1.82.1 and earlier on some Linux systems allows local users to create arbitrary files owned by the uucp user via a symlink attack.CVE-2000-069910.0Format string vulnerability in ftpd in HP-UX 10.20 allows remote attackers to cause a denial of service or execute arbitrary commands via fo CVE-2000-07005.0Cisco Gigabit Switch Routers (GSR) with Fast Ethernet / Gigabit Ethernet cards, from IOS versions 11.2(15)GS1A up to 11.2(19)GS0.2 and some CVE-2000-07014.6The wrapper program in mailman 2.0beta3 and 2.0beta4 does not properly cleanse untrusted format strings, which allows local users to gain pr CVE-2000-07027.2The net.init rc script in HP-UX 11.00 (S008net.init) allows local users to overwrite arbitrary files via a symlink attack that points from /CVE-2000-07037.2suidperl (aka sperl) does not properly cleanse the escape sequence "~!" before calling /bin/mail to send an error report, which allows local CVE-2000-070410.0Buffer overflow in SGI Omron WorldView Wnn allows remote attackers to execute arbitrary commands via long JS_OPEN, JS_MKDIR, or JS_FILE_INFO CVE-2000-07055.0ntop running in web mode allows remote attackers to read arbitrary files via a .. (dot dot) attack.