CVE-2000-0181

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Firewall-1 3.0 and 4.0 leaks packets with private IP address information, which could allow remote attackers to determine the real IP address of the host that is making the connection.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
Mar 11, 2000
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-01825.0iPlanet Web Server 4.1 allows remote attackers to cause a denial of service via a large number of GET commands, which consumes memory and caCVE-2000-01835.1Buffer overflow in ircII 4.4 IRC client allows remote attackers to execute commands via the DCC chat capability.CVE-2000-01842.1Linux printtool sets the permissions of printer configuration files to be world-readable, which allows local attackers to obtain printer shaCVE-2000-01855.0RealMedia RealServer reveals the real IP address of a Real Server, even if the address is supposed to be private.CVE-2000-01867.2Buffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long command line argumenCVE-2000-01877.5EZShopper 3.0 loadpage.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute commands via shelCVE-2000-01887.5EZShopper 3.0 search.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute commands via shell CVE-2000-01895.0ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onrCVE-2000-01905.0AOL Instant Messenger (AIM) client allows remote attackers to cause a denial of service via a message with a malformed ASCII value.CVE-2000-019110.0Axis StorPoint CD allows remote attackers to access administrator URLs without authentication via a .. (dot dot) attack.CVE-2000-01925.0The default installation of Caldera OpenLinux 2.3 includes the CGI program rpm_query, which allows remote attackers to determine what packagCVE-2000-01937.2The default configuration of Dosemu in Corel Linux 1.0 allows local users to execute the system.com program and gain privileges.
CVE-2000-0181: Medium severity, CVSS 5.0 | Vulnix