CVE-2000-0326

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Meeting Maker uses weak encryption (a polyalphabetic substitution cipher) for passwords, which allows remote attackers to sniff and decrypt passwords for Meeting Maker accounts.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://support.on.com/support/mmxp.nsf/31af51e08bcc93eb852565a90056138b/11af70407a16b165852568c50056a952?OpenDocumentVendor Advisory
http://www.securityfocus.com/bid/1151Exploit, Vendor Advisory
http://support.on.com/support/mmxp.nsf/31af51e08bcc93eb852565a90056138b/11af70407a16b165852568c50056a952?OpenDocumentVendor Advisory
http://www.securityfocus.com/bid/1151Exploit, Vendor Advisory

Timeline

Published: Apr 25, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-03277.6Microsoft Virtual Machine (VM) allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal c CVE-2000-03285.0Windows NT 4.0 generates predictable random TCP initial sequence numbers (ISN), which allows remote attackers to perform spoofing and sessio CVE-2000-03295.1A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embedded script in an HTML CVE-2000-03307.6The networking software in Windows 95 and Windows 98 allows remote attackers to execute commands via a long file name string, aka the "File CVE-2000-03315.0Buffer overflow in Microsoft command processor (CMD.EXE) for Windows NT and Windows 2000 allows a local user to cause a denial of service vi CVE-2000-03325.0UltraBoard.pl or UltraBoard.cgi CGI scripts in UltraBoard 1.6 allows remote attackers to read arbitrary files via a pathname string that inc CVE-2000-03335.0tcpdump, Ethereal, and other sniffer packages allow remote attackers to cause a denial of service via malformed DNS packets in which a jump CVE-2000-03342.1The Allaire Spectra container editor preview tool does not properly enforce object security, which allows an attacker to conduct unauthorize CVE-2000-03357.5The resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS query results.CVE-2000-03362.1Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack.CVE-2000-03377.2Buffer overflow in Xsun X server in Solaris 7 allows local users to gain root privileges via a long -dev parameter.CVE-2000-03385.5Concurrent Versions Software (CVS) uses predictable temporary file names for locking, which allows local users to cause a denial of service