CVE-2000-0012

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Buffer overflow in w3-msql CGI program in miniSQL package allows remote attackers to execute commands.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published
Dec 27, 1999
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-00137.2IRIX soundplayer program allows local users to gain privileges by including shell metacharacters in a .wav file, which is executed via the mCVE-2000-00145.0Denial of service in Savant web server via a null character in the requested URL.CVE-2000-00154.6CascadeView TFTP server allows local users to gain privileges via a symlink attack.CVE-2000-00165.0Buffer overflow in Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service or execute commands via a long usCVE-2000-001710.0Buffer overflow in Linux linuxconf package allows remote attackers to gain root privileges via a long parameter.CVE-2000-00187.2wmmon in FreeBSD allows local users to gain privileges via the .wmmonrc configuration file.CVE-2000-00192.1IMail POP3 daemon uses weak encryption, which allows local users to read files.CVE-2000-00205.0DNS PRO allows remote attackers to conduct a denial of service via a large number of connections.CVE-2000-00215.0Lotus Domino HTTP server allows remote attackers to determine the real path of the server via a request to a non-existent script in /cgi-binCVE-2000-00225.0Lotus Domino HTTP server does not properly disable anonymous access for the cgi-bin directory.CVE-2000-00235.0Buffer overflow in Lotus Domino HTTP server allows remote attackers to cause a denial of service via a long URL.CVE-2000-00246.4IIS does not properly canonicalize URLs, potentially allowing remote attackers to bypass access restrictions in third-party software via esc
CVE-2000-0012: Critical severity, CVSS 10.0 | Vulnix