CVE-2000-0389

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Buffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root privileges.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published
May 16, 2000
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-039010.0Buffer overflow in krb425_conv_principal function in Kerberos 5 allows remote attackers to gain root privileges.CVE-2000-039110.0Buffer overflow in krshd in Kerberos 5 allows remote attackers to gain root privileges.CVE-2000-03927.2Buffer overflow in ksu in Kerberos 5 allows local users to gain root privileges.CVE-2000-03937.2The KDE kscd program does not drop privileges when executing a program specified in a user's SHELL environmental variable, which allows the CVE-2000-03945.0NetProwler 3.0 allows remote attackers to cause a denial of service by sending malformed IP packets that trigger NetProwler's Man-in-the-MidCVE-2000-03955.0Buffer overflow in CProxy 3.3 allows remote users to cause a denial of service via a long HTTP request.CVE-2000-03965.0The add.exe program in the Carello shopping cart software allows remote attackers to duplicate files on the server, which could allow the atCVE-2000-03975.0The EMURL web-based email account software encodes predictable identifiers in user session URLs, which allows a remote attacker to access a CVE-2000-039810.0Buffer overflow in wconsole.dll in Rockliffe MailSite Management Agent allows remote attackers to execute arbitrary commands via a long querCVE-2000-03995.0Buffer overflow in MDaemon POP server allows remote attackers to cause a denial of service via a long user name.CVE-2000-04007.5The Microsoft Active Movie ActiveX Control in Internet Explorer 5 does not restrict which file types can be downloaded, which allows an attaCVE-2000-04017.5Buffer overflows in redirect.exe and changepw.exe in PDGSoft shopping cart allow remote attackers to execute arbitrary commands via a long q
CVE-2000-0389: Critical severity, CVSS 10.0 | Vulnix