CVE-2000-0428

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Buffer overflow in the SMTP gateway for InterScan Virus Wall 3.32 and earlier allows a remote attacker to execute arbitrary commands via a long filename for a uuencoded attachment.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published: May 4, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-04297.5A backdoor password in Cart32 3.0 and earlier allows remote attackers to execute arbitrary commands.CVE-2000-04305.0Cart32 allows remote attackers to access sensitive debugging information by appending /expdate to the URL request.CVE-2000-04317.5Cobalt RaQ2 and RaQ3 does not properly set the access permissions and ownership for files that are uploaded via FrontPage, which allows atta CVE-2000-04327.5The calender.pl and the calendar_admin.pl calendar scripts by Matt Kruse allow remote attackers to execute arbitrary commands via shell meta CVE-2000-04334.6The SuSE aaa_base package installs some system accounts with home directories set to /tmp, which allows local users to gain privileges to th CVE-2000-04347.5The administrative password for the Allmanage web site administration software is stored in plaintext in a file which could be accessed by r CVE-2000-04357.5The allmanageup.pl file upload CGI script in the Allmanage Website administration software 2.6 can be called directly by remote attackers, w CVE-2000-04365.0MetaProducts Offline Explorer 1.2 and earlier allows remote attackers to access arbitrary files via a .. (dot dot) attack.CVE-2000-043710.0Buffer overflow in the CyberPatrol daemon "cyberdaemon" used in gauntlet and WebShield allows remote attackers to cause a denial of service CVE-2000-04387.2Buffer overflow in fdmount on Linux systems allows local users in the "floppy" group to execute arbitrary commands via a long mountpoint par CVE-2000-04392.6Internet Explorer 4.0 and 5.0 allows a malicious web site to obtain client cookies from another domain by including that domain name and esc CVE-2000-04405.0NetBSD 1.4.2 and earlier allows remote attackers to cause a denial of service by sending a packet with an unaligned IP timestamp option.