CVE-2000-1127

LowCVSS 3.6/10Last modified Jun 16, 2026

Description

registrar in the HP resource monitor service allows local users to read and modify arbitrary files by renaming the original registrar.log log file and creating a symbolic link to the target file, to which registrar appends log information and sets the permissions to be world readable.

Metrics

CVSS 2.0 3.6/10AV:L/AC:L/Au:N/C:P/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/archive/1/143845Exploit, Patch, Vendor Advisory
http://www.securityfocus.com/bid/1919Exploit, Patch, Vendor Advisory
http://www.securityfocus.com/archive/1/143845Exploit, Patch, Vendor Advisory
http://www.securityfocus.com/bid/1919Exploit, Patch, Vendor Advisory

Timeline

Published: Jan 9, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-11284.6The default configuration of McAfee VirusScan 4.5 does not quote the ImagePath variable, which improperly sets the search path and allows lo CVE-2000-11295.0McAfee WebShield SMTP 4.5 allows remote attackers to cause a denial of service via a malformed recipient field.CVE-2000-11307.5McAfee WebShield SMTP 4.5 allows remote attackers to bypass email content filtering rules by including Extended ASCII characters in name of CVE-2000-11317.5Bill Kendrick web site guestbook (GBook) allows remote attackers to execute arbitrary commands via shell metacharacters in the _MAILTO form CVE-2000-11326.4DCForum cgforum.cgi CGI script allows remote attackers to read arbitrary files, and delete the program itself, via a malformed "forum" varia CVE-2000-11335.0Authentix Authentix100 allows remote attackers to bypass authentication by inserting a . (dot) into the URL for a protected directory.CVE-2000-11347.2Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when processing << redir CVE-2000-11354.6fshd (fsh daemon) in Debian GNU/Linux allows local users to overwrite files of other users via a symlink attack.CVE-2000-11364.6elvis-tiny before 1.4-10 in Debian GNU/Linux, and possibly other Linux operating systems, allows local users to overwrite files of other use CVE-2000-11374.6GNU ed before 0.2-18.1 allows local users to overwrite the files of other users via a symlink attack.CVE-2000-11387.5Lotus Notes R5 client R5.0.5 and earlier does not properly warn users when an S/MIME email message has been modified, which could allow an a CVE-2000-11397.5The installation of Microsoft Exchange 2000 before Rev. A creates a user account with a known password, which could allow attackers to gain