CVE-2000-0749

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

Buffer overflow in the Linux binary compatibility module in FreeBSD 3.x through 5.x allows local users to gain root privileges via long filenames in the linux shadow file system.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/freebsd/2000-08/0338.htmlPatch, Vendor Advisory
http://www.osvdb.org/1536
http://www.securityfocus.com/bid/1628Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5968
http://archives.neohapsis.com/archives/freebsd/2000-08/0338.htmlPatch, Vendor Advisory
http://www.osvdb.org/1536
http://www.securityfocus.com/bid/1628Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5968

Timeline

Published: Oct 20, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-07507.5Buffer overflow in mopd (Maintenance Operations Protocol loader daemon) allows remote attackers to execute arbitrary commands via a long fil CVE-2000-07517.5mopd (Maintenance Operations Protocol loader daemon) does not properly cleanse user-injected format strings, which allows remote attackers t CVE-2000-07527.2Buffer overflows in brouted in FreeBSD and possibly other OSes allows local users to gain root privileges via long command line arguments.CVE-2000-07535.0The Microsoft Outlook mail client identifies the physical path of the sender's machine within a winmail.dat attachment to Rich Text Format (CVE-2000-07542.1Vulnerability in HP OpenView Network Node Manager (NMM) version 6.1 related to passwords.CVE-2000-07554.6Vulnerability in the newgrp command in HP-UX 11.00 allows local users to gain privileges.CVE-2000-07565.0Microsoft Outlook 2000 does not properly process long or malformed fields in vCard (.vcf) files, which allows attackers to cause a denial of CVE-2000-075710.0The sysgen service in Aptis Totalbill does not perform authentication, which allows remote attackers to gain root privileges by connecting t CVE-2000-07584.6The web interface for Lyris List Manager 3 and 4 allows list subscribers to obtain administrative access by modifying the value of the list_CVE-2000-07596.4Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates CVE-2000-07606.4The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexist CVE-2000-07615.0OS2/Warp 4.5 FTP server allows remote attackers to cause a denial of service via a long username.