CVE-2000-0401

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Buffer overflows in redirect.exe and changepw.exe in PDGSoft shopping cart allow remote attackers to execute arbitrary commands via a long query string.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
May 1, 2000
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-04022.1The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in plaintext in a log fileCVE-2000-04035.0The CIFS Computer Browser service on Windows NT 4.0 allows a remote attacker to cause a denial of service by sending a large number of host CVE-2000-04045.0The CIFS Computer Browser service allows remote attackers to cause a denial of service by sending a ResetBrowser frame to the Master BrowserCVE-2000-040510.0Buffer overflow in L0pht AntiSniff allows remote attackers to execute arbitrary commands via a malformed DNS response packet.CVE-2000-04062.6Netscape Communicator before version 4.73 and Navigator 4.07 do not properly validate SSL certificates, which allows remote attackers to steCVE-2000-04077.2Buffer overflow in Solaris netpr program allows local users to execute arbitrary commands via a long -p option.CVE-2000-04085.0IIS 4.05 and 5.0 allow remote attackers to cause a denial of service via a long, complex URL that appears to contain a large number of file CVE-2000-04093.7Netscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local users to overwrite files of the user importCVE-2000-04105.0ColdFusion Server 4.5.1 allows remote attackers to cause a denial of service by making repeated requests to a CFCACHE tagged cache file thatCVE-2000-04115.0Matt Wright's FormMail CGI script allows remote attackers to obtain environmental variables via the env_report parameter.CVE-2000-04127.5The gnapster and knapster clients for Napster do not properly restrict access only to MP3 files, which allows remote attackers to read arbitCVE-2000-04135.0The shtml.exe program in the FrontPage extensions package of IIS 4.0 and 5.0 allows remote attackers to determine the physical path of HTML,
CVE-2000-0401: High severity, CVSS 7.5 | Vulnix