CVE-2000-0411

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Matt Wright's FormMail CGI script allows remote attackers to obtain environmental variables via the env_report parameter.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
May 10, 2000
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-04127.5The gnapster and knapster clients for Napster do not properly restrict access only to MP3 files, which allows remote attackers to read arbitCVE-2000-04135.0The shtml.exe program in the FrontPage extensions package of IIS 4.0 and 5.0 allows remote attackers to determine the physical path of HTML,CVE-2000-04144.6Vulnerability in shutdown command for HP-UX 11.X and 10.X allows allows local users to gain privileges via malformed input variables.CVE-2000-04155.0Buffer overflow in Outlook Express 4.x allows attackers to cause a denial of service via a mail or news message that has a .jpg or .bmp attaCVE-2000-04165.0NTMail 5.x allows network users to bypass the NTMail proxy restrictions by redirecting their requests to NTMail's web configuration server.CVE-2000-04175.0The HTTP administration interface to the Cayman 3220-H DSL router allows remote attackers to cause a denial of service via a long username oCVE-2000-04185.0The Cayman 3220-H DSL router allows remote attackers to cause a denial of service via oversized ICMP echo (ping) requests.CVE-2000-04197.5The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthorized activities via tCVE-2000-04207.2The default configuration of SYSKEY in Windows 2000 stores the startup key in the registry, which could allow an attacker tor ecover it and CVE-2000-04217.5The process_bug.cgi script in Bugzilla allows remote attackers to execute arbitrary commands via shell metacharacters.CVE-2000-04227.5Buffer overflow in Netwin DMailWeb CGI program allows remote attackers to execute arbitrary commands via a long utoken parameter.CVE-2000-04235.0Buffer overflow in Netwin DNEWSWEB CGI program allows remote attackers to execute arbitrary commands via long parameters such as group, cmd,
CVE-2000-0411: Medium severity, CVSS 5.0 | Vulnix