CVE-2000-1216

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

Buffer overflow in portmir for AIX 4.3.0 allows local users to corrupt lock files and gain root privileges via the echo_error routine.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-120

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www-1.ibm.com/support/docview.wss?uid=isg1IY07832Broken Link
http://www.kb.cert.org/vuls/id/433499Third Party Advisory, US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/7929VDB Entry, Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=isg1IY07832Broken Link
http://www.kb.cert.org/vuls/id/433499Third Party Advisory, US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/7929VDB Entry, Vendor Advisory

Timeline

Published: Jan 27, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-12174.6Microsoft Windows 2000 before Service Pack 2 (SP2), when running in a non-Windows 2000 domain and using NTLM authentication, and when creden CVE-2000-12189.8The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to CVE-2000-12197.5The -ftrapv compiler option in gcc and g++ 3.3.3 and earlier does not handle all types of integer overflows, which may leave applications vu CVE-2000-122010.0The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing s CVE-2000-122110.0The line printer daemon (lpd) in the lpr package in multiple Linux operating systems authenticates by comparing the reverse-resolved hostnam CVE-2000-12227.2AIX sysback before 4.2.1.13 uses a relative path to find and execute the hostname program, which allows local users to gain privileges by mo CVE-2000-12237.5quikstore.cgi in Quikstore Shopping Cart allows remote attackers to execute arbitrary commands via shell metacharacters in the URL portion o CVE-2000-12245.0Caucho Technology Resin 1.2 and possibly earlier allows remote attackers to view JSP source via an HTTP request to a .jsp file with certain CVE-2000-12255.0Xitami 2.5b installs the testcgi.exe program by default in the cgi-bin directory, which allows remote attackers to gain sensitive configurat CVE-2000-12265.0Snort 1.6, when running in straight ASCII packet logging mode or IDS mode with straight decoded ASCII packet logging selected, allows remote CVE-2000-12275.0Windows NT 4.0 and Windows 2000 hosts allow remote attackers to cause a denial of service (unavailable connections) by sending multiple SMB CVE-2000-12285.0Phorum 3.0.7 allows remote attackers to change the administrator password without authentication via an HTTP request for admin.php3 that set