CVE-2000-0818

CriticalCVSS 10.0/10Last modified Sep 23, 2026

Description

The default installation for the Oracle listener program 7.3.4, 8.0.6, and 8.1.6 allows an attacker to cause logging information to be appended to arbitrary files and execute commands via the SET TRC_FILE or SET LOG_FILE commands.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published
Dec 19, 2000
Last modified
Sep 23, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-08247.2The unsetenv function in glibc 2.1.1 does not properly unset an environmental variable if the variable is provided twice to a program, whichCVE-2000-08255.0Ipswitch Imail 6.0 allows remote attackers to cause a denial of service via a large number of connections in which a long Host: header is seCVE-2000-082610.0Buffer overflow in ddicgi.exe program in Mobius DocumentDirect for the Internet 1.2 allows remote attackers to execute arbitrary commands viCVE-2000-082710.0Buffer overflow in the web authorization form of Mobius DocumentDirect for the Internet 1.2 allows remote attackers to cause a denial of serCVE-2000-082810.0Buffer overflow in ddicgi.exe in Mobius DocumentDirect for the Internet 1.2 allows remote attackers to execute arbitrary commands via a longCVE-2000-08292.1The tmpwatch utility in Red Hat Linux forks a new process for each directory level, which allows local users to cause a denial of service byCVE-2000-08305.0annclist.exe in webTV for Windows allows remote attackers to cause a denial of service by via a large, malformed UDP packet to ports 22701 tCVE-2000-08317.5Buffer overflow in Fastream FTP++ 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a lonCVE-2000-08325.0Htgrep CGI program allows remote attackers to read arbitrary files by specifying the full pathname in the hdr parameter.CVE-2000-083310.0Buffer overflow in WinSMTP 1.06f and 2.X allows remote attackers to cause a denial of service via a long (1) USER or (2) HELO command.CVE-2000-08347.5The Windows 2000 telnet client attempts to perform NTLM authentication by default, which allows remote attackers to capture and replay the NCVE-2000-08355.0search.dll Sambar ISAPI Search utility in Sambar Server 4.4 Beta 3 allows remote attackers to read arbitrary directories by specifying the d
CVE-2000-0818: Critical severity, CVSS 10.0 | Vulnix