CVE-2000-0397

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

The EMURL web-based email account software encodes predictable identifiers in user session URLs, which allows a remote attacker to access a user's email account.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

Timeline

Published: May 15, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-039810.0Buffer overflow in wconsole.dll in Rockliffe MailSite Management Agent allows remote attackers to execute arbitrary commands via a long quer CVE-2000-03995.0Buffer overflow in MDaemon POP server allows remote attackers to cause a denial of service via a long user name.CVE-2000-04007.5The Microsoft Active Movie ActiveX Control in Internet Explorer 5 does not restrict which file types can be downloaded, which allows an atta CVE-2000-04017.5Buffer overflows in redirect.exe and changepw.exe in PDGSoft shopping cart allow remote attackers to execute arbitrary commands via a long q CVE-2000-04022.1The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in plaintext in a log file CVE-2000-04035.0The CIFS Computer Browser service on Windows NT 4.0 allows a remote attacker to cause a denial of service by sending a large number of host CVE-2000-04045.0The CIFS Computer Browser service allows remote attackers to cause a denial of service by sending a ResetBrowser frame to the Master Browser CVE-2000-040510.0Buffer overflow in L0pht AntiSniff allows remote attackers to execute arbitrary commands via a malformed DNS response packet.CVE-2000-04062.6Netscape Communicator before version 4.73 and Navigator 4.07 do not properly validate SSL certificates, which allows remote attackers to ste CVE-2000-04077.2Buffer overflow in Solaris netpr program allows local users to execute arbitrary commands via a long -p option.CVE-2000-04085.0IIS 4.05 and 5.0 allow remote attackers to cause a denial of service via a long, complex URL that appears to contain a large number of file CVE-2000-04093.7Netscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local users to overwrite files of the user import