CVE-2000-0233

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

SuSE Linux IMAP server allows remote attackers to bypass IMAP authentication and gain privileges.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published
Mar 15, 2000
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-02345.0The default configuration of Cobalt RaQ2 and RaQ3 as specified in access.conf allows remote attackers to view sensitive contents of a .htaccCVE-2000-02357.2Buffer overflow in the huh program in the orville-write package allows local users to gain root privileges.CVE-2000-02365.0Netscape Enterprise Server with Directory Indexing enabled allows remote attackers to list server directories via web publishing tags such aCVE-2000-02376.4Netscape Enterprise Server with Web Publishing enabled allows remote attackers to list arbitrary directories via a GET request for the /publCVE-2000-02385.0Buffer overflow in the web server for Norton AntiVirus for Internet Email Gateways allows remote attackers to cause a denial of service via CVE-2000-02395.0Buffer overflow in the MERCUR WebView WebMail server allows remote attackers to cause a denial of service via a long mail_user parameter in CVE-2000-02405.0vqSoft vqServer program allows remote attackers to read arbitrary files via a /........../ in the URL, a variation of a .. (dot dot) attack.CVE-2000-02415.0vqSoft vqServer stores sensitive information such as passwords in cleartext in the server.cfg file, which allows attackers to gain privilegeCVE-2000-02425.0WindMail allows remote attackers to read arbitrary files or execute commands via shell metacharacters.CVE-2000-02435.0AnalogX SimpleServer:WWW HTTP server 1.03 allows remote attackers to cause a denial of service via a short GET request to cgi-bin.CVE-2000-024410.0The Citrix ICA (Independent Computing Architecture) protocol uses weak encryption (XOR) for user authentication.CVE-2000-024510.0Vulnerability in SGI IRIX objectserver daemon allows remote attackers to create user accounts.