CVE-2000-0191

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Axis StorPoint CD allows remote attackers to access administrator URLs without authentication via a .. (dot dot) attack.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Feb 29, 2000
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-01925.0The default installation of Caldera OpenLinux 2.3 includes the CGI program rpm_query, which allows remote attackers to determine what packagCVE-2000-01937.2The default configuration of Dosemu in Corel Linux 1.0 allows local users to execute the system.com program and gain privileges.CVE-2000-01947.2buildxconf in Corel Linux allows local users to modify or create arbitrary files via the -x or -f parameters.CVE-2000-01957.2setxconf in Corel Linux allows local users to gain root access via the -T parameter, which executes the user's .xserverrc file.CVE-2000-01967.5Buffer overflow in mhshow in the Linux nmh package allows remote attackers to execute commands via malformed MIME headers in an email messagCVE-2000-01974.6The Windows NT scheduler uses the drive mapping of the interactive user who is currently logged onto the system, which allows the local userCVE-2000-01985.0Buffer overflow in POP3 and IMAP servers in the MERCUR mail server suite allows remote attackers to cause a denial of service.CVE-2000-01997.2When a new SQL Server is registered in Enterprise Manager for Microsoft SQL Server 7.0 and the "Always prompt for login name and password" oCVE-2000-02005.1Buffer overflow in Microsoft Clip Art Gallery allows remote attackers to cause a denial of service or execute commands via a malformed CIL (CVE-2000-02015.1The window.showHelp() method in Internet Explorer 5.x does not restrict HTML help files (.chm) to be executed from the local host, which allCVE-2000-02027.5Microsoft SQL Server 7.0 and Microsoft Data Engine (MSDE) 1.0 allow remote attackers to gain privileges via a malformed Select statement in CVE-2000-02035.0The Trend Micro OfficeScan client tmlisten.exe allows remote attackers to cause a denial of service via malformed data to port 12345.
CVE-2000-0191: Critical severity, CVSS 10.0 | Vulnix