CVE-2000-0724

MediumCVSS 6.2/10Last modified Jun 16, 2026

Description

The go-gnome Helix GNOME pre-installer allows local users to overwrite arbitrary files via a symlink attack on various files in /tmp, including uudecode, snarf, and some installer files.

Metrics

CVSS 2.0 6.2/10AV:L/AC:H/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2000-08/0351.htmlVendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2000-08/0356.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/1622Patch, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2000-08/0351.htmlVendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2000-08/0356.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/1622Patch, Vendor Advisory

Timeline

Published: Oct 20, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-07257.2Zope before 2.2.1 does not properly restrict access to the getRoles method, which allows users who can edit DTML to add or modify roles by m CVE-2000-07262.6CGIMail.exe CGI program in Stalkerlab Mailers 1.1.2 allows remote attackers to read arbitrary files by specifying the file in the $Attach$ h CVE-2000-07277.6xpdf PDF viewer client earlier than 0.91 does not properly launch a web browser for embedded URL's, which allows an attacker to execute arbi CVE-2000-07287.2xpdf PDF viewer client earlier than 0.91 allows local users to overwrite arbitrary files via a symlink attack.CVE-2000-07292.1FreeBSD 5.x, 4.x, and 3.x allows local users to cause a denial of service by executing a program with a malformed ELF image header.CVE-2000-07304.6Vulnerability in newgrp command in HP-UX 11.0 allows local users to gain privileges.CVE-2000-07315.0Directory traversal vulnerability in Worm HTTP server allows remote attackers to read arbitrary files via a .. (dot dot) attack.CVE-2000-07325.0Worm HTTP server allows remote attackers to cause a denial of service via a long URL.CVE-2000-073310.0Telnetd telnet server in IRIX 5.2 through 6.1 does not properly cleans user-injected format strings, which allows remote attackers to execut CVE-2000-07345.0eEye IRIS 1.01 beta allows remote attackers to cause a denial of service via a large number of UDP connections.CVE-2000-07355.0Buffer overflow in Becky! Internet Mail client 1.26.03 and earlier allows remote attackers to cause a denial of service via a long Content-t CVE-2000-07365.0Buffer overflow in Becky! Internet Mail client 1.26.04 and earlier allows remote attackers to cause a denial of service via a long Content-t