CVE-2000-0109

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

The mcsp Client Site Processor system (MultiCSP) in Standard and Poor's ComStock is installed with several accounts that have no passwords or easily guessable default passwords.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published
Jan 31, 2000
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-01107.5The WebSiteTool shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.CVE-2000-01117.5The RightFax web client uses predictable session numbers, which allows remote attackers to hijack user sessions.CVE-2000-01127.2The default installation of Debian GNU/Linux uses an insecure Master Boot Record (MBR) which allows a local user to boot from a floppy disk CVE-2000-01137.5The SyGate Remote Management program does not properly restrict access to its administration service, which allows remote attackers to causeCVE-2000-01145.0Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in tCVE-2000-01155.0IIS allows local users to cause a denial of service via invalid regular expressions in a Visual Basic script in an ASP page.CVE-2000-01167.5Firewall-1 does not properly filter script tags, which allows remote attackers to bypass the "Strip Script Tags" restriction by including anCVE-2000-01177.2The siteUserMod.cgi program in Cobalt RaQ2 servers allows any Site Administrator to modify passwords for other users, site administrators, aCVE-2000-01187.2The Red Hat Linux su program does not log failed password guesses if the su process is killed before it times out, which allows local attackCVE-2000-01197.2The default configurations for McAfee Virus Scan and Norton Anti-Virus virus checkers do not check files in the RECYCLED folder that is usedCVE-2000-01207.5The Remote Access Service invoke.cfm template in Allaire Spectra 1.0 allows users to bypass authentication via the bAuthenticated parameter.CVE-2000-01213.6The Recycle Bin utility in Windows NT and Windows 2000 allows local users to read or modify files by creating a subdirectory with the victim
CVE-2000-0109: Critical severity, CVSS 10.0 | Vulnix