CVE-2000-0213

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

The Sambar server includes batch files ECHO.BAT and HELLO.BAT in the CGI directory, which allow remote attackers to execute commands via shell metacharacters.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published: Feb 23, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-02144.6FTP Explorer uses weak encryption for storing the username, password, and profile of FTP sites.CVE-2000-02157.2Vulnerability in SCO cu program in UnixWare 7.x allows local users to gain privileges.CVE-2000-02165.0Microsoft email clients in Outlook, Exchange, and Windows Messaging automatically respond to Read Receipt and Delivery Receipt tags, which c CVE-2000-02175.1The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious x CVE-2000-02187.2Buffer overflow in Linux mount and umount allows local users to gain root privileges via a long relative pathname.CVE-2000-02197.2Red Hat 6.0 allows local users to gain root access by booting single user and hitting ^C at the password prompt.CVE-2000-02205.0ZoneAlarm sends sensitive system and network information in cleartext to the Zone Labs server if a user requests more information about an e CVE-2000-02215.0The Nautica Marlin bridge allows remote attackers to cause a denial of service via a zero length UDP packet to the SNMP port.CVE-2000-022210.0The installation for Windows 2000 does not activate the Administrator password until the system has rebooted, which allows remote attackers CVE-2000-02237.2Buffer overflow in the wmcdplay CD player program for the WindowMaker desktop allows local users to gain root privileges via a long paramete CVE-2000-02241.2ARCserve agent in SCO UnixWare 7.x allows local attackers to gain root privileges via a symlink attack.CVE-2000-02255.0The Pocsag POC32 program does not properly prevent remote users from accessing its server port, even if the option has been disabled.