CVE-2000-0422

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Buffer overflow in Netwin DMailWeb CGI program allows remote attackers to execute arbitrary commands via a long utoken parameter.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published
May 4, 2000
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-04235.0Buffer overflow in Netwin DNEWSWEB CGI program allows remote attackers to execute arbitrary commands via long parameters such as group, cmd,CVE-2000-04247.5The CGI counter 4.0.7 by George Burgyan allows remote attackers to execute arbitrary commands via shell metacharacters.CVE-2000-042510.0Buffer overflow in the Web Archives component of L-Soft LISTSERV 1.8 allows remote attackers to execute arbitrary commands.CVE-2000-04265.0UltraBoard 1.6 and other versions allow remote attackers to cause a denial of service by referencing UltraBoard in the Session parameter, whCVE-2000-04274.6The Aladdin Knowledge Systems eToken device allows attackers with physical access to the device to obtain sensitive information without knowCVE-2000-042810.0Buffer overflow in the SMTP gateway for InterScan Virus Wall 3.32 and earlier allows a remote attacker to execute arbitrary commands via a lCVE-2000-04297.5A backdoor password in Cart32 3.0 and earlier allows remote attackers to execute arbitrary commands.CVE-2000-04305.0Cart32 allows remote attackers to access sensitive debugging information by appending /expdate to the URL request.CVE-2000-04317.5Cobalt RaQ2 and RaQ3 does not properly set the access permissions and ownership for files that are uploaded via FrontPage, which allows attaCVE-2000-04327.5The calender.pl and the calendar_admin.pl calendar scripts by Matt Kruse allow remote attackers to execute arbitrary commands via shell metaCVE-2000-04334.6The SuSE aaa_base package installs some system accounts with home directories set to /tmp, which allows local users to gain privileges to thCVE-2000-04347.5The administrative password for the Allmanage web site administration software is stored in plaintext in a file which could be accessed by r
CVE-2000-0422: High severity, CVSS 7.5 | Vulnix