CVE-2000-0095

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

The PMTU discovery procedure used by HP-UX 10.30 and 11.00 for determining the optimum MTU generates large amounts of traffic in response to small packets, allowing remote attackers to cause the system to be used as a packet amplifier.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected software

No affected versions have been published.

Timeline

Published: Jan 24, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-00967.2Buffer overflow in qpopper 3.0 beta versions allows local users to gain privileges via a long LIST command.CVE-2000-00975.0The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argu CVE-2000-00985.0Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file t CVE-2000-00997.2Buffer overflow in UnixWare ppptalk command allows local users to gain privileges via a long prompt argument.CVE-2000-01007.2The SMS Remote Control program is installed with insecure permissions, which allows local users to gain privileges by modifying or replacing CVE-2000-01017.5The Make-a-Store OrderPage shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.CVE-2000-01027.5The SalesCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.CVE-2000-01037.5The SmartCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.CVE-2000-01047.5The Shoptron shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.CVE-2000-01055.0Outlook Express 5.01 and Internet Explorer 5.01 allow remote attackers to view a user's email messages via a script that accesses a variable CVE-2000-01067.5The EasyCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.CVE-2000-01077.2Linux apcd program allows local attackers to modify arbitrary files via a symlink attack.