CVE-2000-0149

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Zeus web server allows remote attackers to view the source code for CGI programs via a null character (%00) at the end of a URL.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
Feb 8, 2000
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-01507.5Check Point Firewall-1 allows remote attackers to bypass port access restrictions on an FTP server by forcing it to send malicious packets tCVE-2000-01516.2GNU make follows symlinks when it reads a Makefile from stdin, which allows other local users to execute commands.CVE-2000-01525.0Remote attackers can cause a denial of service in Novell BorderManager 3.5 by pressing the enter key in a telnet connection to port 2000.CVE-2000-01535.0FrontPage Personal Web Server (PWS) allows remote attackers to read files via a .... (dot dot) attack.CVE-2000-01541.2The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack.CVE-2000-01557.2Windows NT Autorun executes the autorun.inf file on non-removable media, which allows local attackers to specify an alternate program to exeCVE-2000-01565.1Internet Explorer 4.x and 5.x allows remote web servers to access files on the client that are outside of its security domain, aka the "ImagCVE-2000-01577.2NetBSD ptrace call on VAX allows local users to gain privileges by modifying the PSL contents in the debugging process.CVE-2000-01587.5Buffer overflow in MMDF server allows remote attackers to gain privileges via a long MAIL FROM command to the SMTP daemon.CVE-2000-01597.5HP Ignite-UX does not save /etc/passwd when it creates an image of a trusted system, which can set the password field to a blank and allow aCVE-2000-01607.6The Microsoft Active Setup ActiveX component in Internet Explorer 4.x and 5.x allows a remote attacker to install software components withouCVE-2000-01617.5Sample web sites on Microsoft Site Server 3.0 Commerce Edition do not validate an identification number, which allows remote attackers to ex
CVE-2000-0149: Medium severity, CVSS 5.0 | Vulnix