CVE-2000-0166

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Buffer overflow in the InterAccess telnet server TelnetD allows remote attackers to execute commands via a long login name.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Feb 21, 2000
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-01672.1IIS Inetinfo.exe allows local users to cause a denial of service by creating a mail file with a long name and a .txt.eml extension in the piCVE-2000-01685.0Microsoft Windows 9x operating systems allow an attacker to cause a denial of service via a pathname that includes file device names, aka thCVE-2000-01697.5Batch files in the Oracle web listener ows-bin directory allow remote attackers to execute commands via a malformed URL that includes '?&'.CVE-2000-01707.2Buffer overflow in the man program in Linux allows local users to gain privileges via the MANPAGER environmental variable.CVE-2000-01717.2atsadc in the atsar package for Linux does not properly check the permissions of an output file, which allows local users to gain root priviCVE-2000-01727.2The mtr program only uses a seteuid call when attempting to drop privileges, which could allow local users to gain root privileges.CVE-2000-01735.0Vulnerability in the EELS system in SCO UnixWare 7.1.x allows remote attackers to cause a denial of service.CVE-2000-01745.0StarOffice StarScheduler web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.CVE-2000-017510.0Buffer overflow in StarOffice StarScheduler web server allows remote attackers to gain root access via a long GET command.CVE-2000-01765.0The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the server by requesting a URCVE-2000-017710.0DNSTools CGI applications allow remote attackers to execute arbitrary commands via shell metacharacters.CVE-2000-01787.5ServerIron switches by Foundry Networks have predictable TCP/IP sequence numbers, which allows remote attackers to spoof or hijack sessions.
CVE-2000-0166: Critical severity, CVSS 10.0 | Vulnix