CVE-2000-0702

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

The net.init rc script in HP-UX 11.00 (S008net.init) allows local users to overwrite arbitrary files via a symlink attack that points from /tmp/stcp.conf to the targeted file.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2000-08/0261.htmlExploit
http://www.securityfocus.com/bid/1602Exploit, Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5131
http://archives.neohapsis.com/archives/bugtraq/2000-08/0261.htmlExploit
http://www.securityfocus.com/bid/1602Exploit, Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5131

Timeline

Published: Oct 20, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-07037.2suidperl (aka sperl) does not properly cleanse the escape sequence "~!" before calling /bin/mail to send an error report, which allows local CVE-2000-070410.0Buffer overflow in SGI Omron WorldView Wnn allows remote attackers to execute arbitrary commands via long JS_OPEN, JS_MKDIR, or JS_FILE_INFO CVE-2000-07055.0ntop running in web mode allows remote attackers to read arbitrary files via a .. (dot dot) attack.CVE-2000-070610.0Buffer overflows in ntop running in web mode allows remote attackers to execute arbitrary commands.CVE-2000-07077.5PCCS MySQLDatabase Admin Tool Manager 1.2.4 and earlier installs the file dbconnect.inc within the web root, which allows remote attackers t CVE-2000-07085.0Buffer overflow in Pragma Systems TelnetServer 2000 version 4.0 allows remote attackers to cause a denial of service via a long series of nu CVE-2000-07095.0The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to cause a denial of service in some compo CVE-2000-07105.0The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to determine the physical path of the serv CVE-2000-07117.5Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which allows remote attacker CVE-2000-07127.2Linux Intrusion Detection System (LIDS) 0.9.7 allows local users to gain root privileges when LIDS is disabled via the security=0 boot optio CVE-2000-07137.6Buffer overflow in Adobe Acrobat 4.05, Reader, Business Tools, and Fill In products that handle PDF files allows attackers to execute arbitr CVE-2000-07147.2umb-scheme 3.2-11 for Red Hat Linux is installed with world-writeable files.