CVE-2000-0722

MediumCVSS 6.2/10Last modified Jun 16, 2026

Description

Helix GNOME Updater helix-update 0.5 and earlier allows local users to install arbitrary RPM packages by creating the /tmp/helix-install installation directory before root has begun installing packages.

Metrics

CVSS 2.0 6.2/10AV:L/AC:H/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2000-08/0240.htmlVendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2000-08/0251.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/1593Patch, Vendor Advisory
http://www.securityfocus.com/templates/archive.pike?list=1&msg=E13QAYl-0007il-00%40the-village.bc.nu
http://archives.neohapsis.com/archives/bugtraq/2000-08/0240.htmlVendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2000-08/0251.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/1593Patch, Vendor Advisory
http://www.securityfocus.com/templates/archive.pike?list=1&msg=E13QAYl-0007il-00%40the-village.bc.nu

Timeline

Published: Oct 20, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-07231.2Helix GNOME Updater helix-update 0.5 and earlier does not properly create /tmp directories, which allows local users to create empty system CVE-2000-07246.2The go-gnome Helix GNOME pre-installer allows local users to overwrite arbitrary files via a symlink attack on various files in /tmp, includ CVE-2000-07257.2Zope before 2.2.1 does not properly restrict access to the getRoles method, which allows users who can edit DTML to add or modify roles by m CVE-2000-07262.6CGIMail.exe CGI program in Stalkerlab Mailers 1.1.2 allows remote attackers to read arbitrary files by specifying the file in the $Attach$ h CVE-2000-07277.6xpdf PDF viewer client earlier than 0.91 does not properly launch a web browser for embedded URL's, which allows an attacker to execute arbi CVE-2000-07287.2xpdf PDF viewer client earlier than 0.91 allows local users to overwrite arbitrary files via a symlink attack.CVE-2000-07292.1FreeBSD 5.x, 4.x, and 3.x allows local users to cause a denial of service by executing a program with a malformed ELF image header.CVE-2000-07304.6Vulnerability in newgrp command in HP-UX 11.0 allows local users to gain privileges.CVE-2000-07315.0Directory traversal vulnerability in Worm HTTP server allows remote attackers to read arbitrary files via a .. (dot dot) attack.CVE-2000-07325.0Worm HTTP server allows remote attackers to cause a denial of service via a long URL.CVE-2000-073310.0Telnetd telnet server in IRIX 5.2 through 6.1 does not properly cleans user-injected format strings, which allows remote attackers to execut CVE-2000-07345.0eEye IRIS 1.01 beta allows remote attackers to cause a denial of service via a large number of UDP connections.