CVE-2000-0824

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

The unsetenv function in glibc 2.1.1 does not properly unset an environmental variable if the variable is provided twice to a program, which could allow local users to execute arbitrary commands in setuid programs by specifying their own duplicate environmental variables such as LD_PRELOAD or LD_LIBRARY_PATH.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published
Nov 14, 2000
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-08255.0Ipswitch Imail 6.0 allows remote attackers to cause a denial of service via a large number of connections in which a long Host: header is seCVE-2000-082610.0Buffer overflow in ddicgi.exe program in Mobius DocumentDirect for the Internet 1.2 allows remote attackers to execute arbitrary commands viCVE-2000-082710.0Buffer overflow in the web authorization form of Mobius DocumentDirect for the Internet 1.2 allows remote attackers to cause a denial of serCVE-2000-082810.0Buffer overflow in ddicgi.exe in Mobius DocumentDirect for the Internet 1.2 allows remote attackers to execute arbitrary commands via a longCVE-2000-08292.1The tmpwatch utility in Red Hat Linux forks a new process for each directory level, which allows local users to cause a denial of service byCVE-2000-08305.0annclist.exe in webTV for Windows allows remote attackers to cause a denial of service by via a large, malformed UDP packet to ports 22701 tCVE-2000-08317.5Buffer overflow in Fastream FTP++ 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a lonCVE-2000-08325.0Htgrep CGI program allows remote attackers to read arbitrary files by specifying the full pathname in the hdr parameter.CVE-2000-083310.0Buffer overflow in WinSMTP 1.06f and 2.X allows remote attackers to cause a denial of service via a long (1) USER or (2) HELO command.CVE-2000-08347.5The Windows 2000 telnet client attempts to perform NTLM authentication by default, which allows remote attackers to capture and replay the NCVE-2000-08355.0search.dll Sambar ISAPI Search utility in Sambar Server 4.4 Beta 3 allows remote attackers to read arbitrary directories by specifying the dCVE-2000-08367.5Buffer overflow in CamShot WebCam Trial2.6 allows remote attackers to execute arbitrary commands via a long Authorization header.