CVE-2000-0786

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

GNU userv 1.0.0 and earlier does not properly perform file descriptor swapping, which can corrupt the USERV_GROUPS and USERV_GIDS environmental variables and allow local users to bypass some access restrictions.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published
Oct 20, 2000
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-07877.5IRC Xchat client versions 1.4.2 and earlier allows remote attackers to execute arbitrary commands by encoding shell metacharacters into a URCVE-2000-078810.0The Mail Merge tool in Microsoft Word does not prompt the user before executing Visual Basic (VBA) scripts in an Access database, which coulCVE-2000-07894.6WinU 5.x and earlier uses weak encryption to store its configuration password, which allows local users to decrypt the password and gain priCVE-2000-07904.6The web-based folder display capability in Microsoft Internet Explorer 5.5 on Windows 98 allows local users to insert Trojan horse programs CVE-2000-07914.6Trustix installs the httpsd program for Apache-SSL with world-writeable permissions, which allows local users to replace it with a Trojan hoCVE-2000-07927.5Gnome Lokkit firewall package before 0.41 does not properly restrict access to some ports, even if a user does not make any services availabCVE-2000-079310.0Norton AntiVirus 5.00.01C with the Novell Netware client does not properly restart the auto-protection service after the first user has loggCVE-2000-07947.2Buffer overflow in IRIX libgl.so library allows local users to gain root privileges via a long HOME variable to programs such as (1) gmemusaCVE-2000-07957.2Buffer overflow in lpstat in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long -n option.CVE-2000-07967.2Buffer overflow in dmplay in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long command line option.CVE-2000-07977.2Buffer overflow in gr_osview in IRIX 6.2 and 6.3 allows local users to gain privileges via a long -D option.CVE-2000-079810.0The truncate function in IRIX 6.x does not properly check for privileges when the file is in the xfs file system, which allows local users t
CVE-2000-0786: Medium severity, CVSS 4.6 | Vulnix