CVE-2000-0009: Nortel Optivity Net Architect

High severity, CVSS 7.2. EPSS: 0.8% chance of exploitation in the next 30 days.

The bna_pass program in Optivity NETarchitect uses the PATH environmental variable for finding the "rm" program, which allows local users to execute arbitrary commands.

Affected products

  • Nortel Optivity Net Architect: version 2.0 only

Published 1999-12-29. Last modified 2026-06-16.