CVE-2000-0141

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Infopop Ultimate Bulletin Board (UBB) allows remote attackers to execute commands via shell metacharacters in the topic hidden field.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published
Feb 11, 2000
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-01425.0The authentication protocol in Timbuktu Pro 2.0b650 allows remote attackers to cause a denial of service via connections to port 407 and 141CVE-2000-01434.6The SSH protocol server sshd allows local users without shell access to redirect a TCP connection through a service that uses the standard sCVE-2000-01447.5Axis 700 Network Scanner does not properly restrict access to administrator URLs, which allows users to bypass the password protection via aCVE-2000-01457.5The libguile.so library file used by gnucash in Debian GNU/Linux is installed with world-writable permissions.CVE-2000-01465.0The Java Server in the Novell GroupWise Web Access Enhancement Pack allows remote attackers to cause a denial of service via a long URL to tCVE-2000-01472.1snmpd in SCO OpenServer has an SNMP community string that is writable by default, which allows local attackers to modify the host's configurCVE-2000-01487.5MySQL 3.22 allows remote attackers to bypass password authentication and access a database via a short check string.CVE-2000-01495.0Zeus web server allows remote attackers to view the source code for CGI programs via a null character (%00) at the end of a URL.CVE-2000-01507.5Check Point Firewall-1 allows remote attackers to bypass port access restrictions on an FTP server by forcing it to send malicious packets tCVE-2000-01516.2GNU make follows symlinks when it reads a Makefile from stdin, which allows other local users to execute commands.CVE-2000-01525.0Remote attackers can cause a denial of service in Novell BorderManager 3.5 by pressing the enter key in a telnet connection to port 2000.CVE-2000-01535.0FrontPage Personal Web Server (PWS) allows remote attackers to read files via a .... (dot dot) attack.
CVE-2000-0141: Critical severity, CVSS 10.0 | Vulnix