CVE-2000-0986

MediumCVSS 4.6/10Last modified Sep 23, 2026

Description

Buffer overflow in Oracle 8.1.5 applications such as names, namesctl, onrsd, osslogin, tnslsnr, tnsping, trcasst, and trcroute possibly allow local users to gain privileges via a long ORACLE_HOME environmental variable.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2000-10/0294.htmlExploit, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5390
http://archives.neohapsis.com/archives/bugtraq/2000-10/0294.htmlExploit, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5390

Timeline

Published: Dec 19, 2000
Last modified: Sep 23, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-09874.6Buffer overflow in oidldapd in Oracle 8.1.6 allow local users to gain privileges via a long "connect" command line parameter.CVE-2000-09887.2WinU 1.0 through 5.1 has a backdoor password that allows remote attackers to gain access to its administrative interface and modify configur CVE-2000-09895.0Buffer overflow in Intel InBusiness eMail Station 1.04.87 POP service allows remote attackers to cause a denial of service and possibly exec CVE-2000-09907.5cmd5checkpw 0.21 and earlier allows remote attackers to cause a denial of service via an "SMTP AUTH" command with an unknown username.CVE-2000-09917.5Buffer overflow in Hilgraeve, Inc. HyperTerminal client on Windows 98, ME, and 2000 allows remote attackers to execute arbitrary commands vi CVE-2000-09925.0Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. (dot dot)CVE-2000-09937.2Format string vulnerability in pw_error function in BSD libutil library allows local users to gain root privileges via a malformed password CVE-2000-09947.2Format string vulnerability in OpenBSD fstat program (and possibly other BSD-based operating systems) allows local users to gain root privil CVE-2000-09957.2Format string vulnerability in OpenBSD yp_passwd program (and possibly other BSD-based operating systems) allows attackers to gain root priv CVE-2000-09967.2Format string vulnerability in OpenBSD su program (and possibly other BSD-based operating systems) allows local attackers to gain root privi CVE-2000-09977.2Format string vulnerabilities in eeprom program in OpenBSD, NetBSD, and possibly other operating systems allows local attackers to gain root CVE-2000-09987.2Format string vulnerability in top program allows local attackers to gain root privileges via the "kill" or "renice" function.