CVE-2000-1195

HighCVSS 7.5/10Last modified Nov 11, 2026

Description

telnet daemon (telnetd) from the Linux netkit package before netkit-telnet-0.16 allows remote attackers to bypass authentication when telnetd is running with the -L command line option.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.caldera.com/support/security/advisories/CSSA-2000-008.0.txtPatch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/4225
http://www.caldera.com/support/security/advisories/CSSA-2000-008.0.txtPatch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/4225

Timeline

Published: Aug 31, 2001
Last modified: Nov 11, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-11965.0PSCOErrPage.htm in Netscape PublishingXpert 2.5 before SP2 allows remote attackers to read arbitrary files by specifying the target file in CVE-2000-11972.1POP2 or POP3 server (pop3d) in imap-uw IMAP package on FreeBSD and other operating systems creates lock files with predictable names, which CVE-2000-11985.5qpopper POP server creates lock files with predictable names, which allows local users to cause a denial of service for other users (lack of CVE-2000-11994.6PostgreSQL stores usernames and passwords in plaintext in (1) pg_shadow and (2) pg_pwd, which allows attackers with sufficient privileges to CVE-2000-12005.0Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy funct CVE-2000-12015.0Check Point FireWall-1 allows remote attackers to cause a denial of service (high CPU) via a flood of packets to port 264.CVE-2000-12027.2ikeyman in IBM IBMHSSSB 1.0 sets the CLASSPATH environmental variable to include the user's own CLASSPATH directories before the system's di CVE-2000-12035.0Lotus Domino SMTP server 4.63 through 5.08 allows remote attackers to cause a denial of service (CPU consumption) by forging an email messag CVE-2000-12045.0Vulnerability in the mod_vhost_alias virtual hosting module for Apache 1.3.9, 1.3.11 and 1.3.12 allows remote attackers to obtain the source CVE-2000-12054.3Cross site scripting vulnerabilities in Apache 1.3.0 through 1.3.11 allow remote attackers to execute script as other web site visitors via CVE-2000-12065.0Vulnerability in Apache httpd before 1.3.11, when configured for mass virtual hosting using mod_rewrite, or mod_vhost_alias in Apache 1.3.9,CVE-2000-12077.2userhelper in the usermode package on Red Hat Linux executes non-setuid programs as root, which does not activate the security measures in g