CVE-2000-0476

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

xterm, Eterm, and rxvt allow an attacker to cause a denial of service by embedding certain escape characters which force the window to be resized.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2000-05/0409.htmlPatch, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2000-05/0420.html
http://www.openwall.com/lists/oss-security/2024/06/09/1
http://www.openwall.com/lists/oss-security/2024/06/09/2
http://www.securityfocus.com/bid/1298Exploit, Patch, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2000-05/0409.htmlPatch, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2000-05/0420.html
http://www.openwall.com/lists/oss-security/2024/06/09/1
http://www.openwall.com/lists/oss-security/2024/06/09/2
http://www.securityfocus.com/bid/1298Exploit, Patch, Vendor Advisory

Timeline

Published: Jun 1, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-04775.0Buffer overflow in Norton Antivirus for Exchange (NavExchange) allows remote attackers to cause a denial of service via a .zip file that con CVE-2000-04785.0In some cases, Norton Antivirus for Exchange (NavExchange) enters a "fail-open" state which allows viruses to pass through the server.CVE-2000-04795.0Dragon FTP server allows remote attackers to cause a denial of service via a long USER command.CVE-2000-04805.0Dragon telnet server allows remote attackers to cause a denial of service via a long username.CVE-2000-04815.0Buffer overflow in KDE Kmail allows a remote attacker to cause a denial of service via an attachment with a long file name.CVE-2000-04825.0Check Point Firewall-1 allows remote attackers to cause a denial of service by sending a large number of malformed fragmented IP packets.CVE-2000-04837.5The DocumentTemplate package in Zope 2.2 and earlier allows a remote attacker to modify DTMLDocuments or DTMLMethods without authorization.CVE-2000-04845.0Small HTTP Server ver 3.06 contains a memory corruption bug causing a memory overflow. The overflowed buffer crashes into a Structured Excep CVE-2000-04852.1Microsoft SQL Server allows local users to obtain database passwords via the Data Transformation Service (DTS) package Properties dialog, ak CVE-2000-04865.0Buffer overflow in Cisco TACACS+ tac_plus server allows remote attackers to cause a denial of service via a malformed packet with a long len CVE-2000-04873.6The Protected Store in Windows 2000 does not properly select the strongest encryption when available, which causes it to use a default of 40 CVE-2000-048810.0Buffer overflow in ITHouse mail server 1.04 allows remote attackers to execute arbitrary commands via a long RCPT TO mail command.