CVE-2000-0538

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

ColdFusion Administrator for ColdFusion 4.5.1 and earlier allows remote attackers to cause a denial of service via a long login password.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=96045469627806&w=2
http://www.allaire.com/handlers/index.cfm?ID=16122&Method=FullPatch, Vendor Advisory
http://www.osvdb.org/3399
http://www.securityfocus.com/bid/1314Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/4611
http://marc.info/?l=bugtraq&m=96045469627806&w=2
http://www.allaire.com/handlers/index.cfm?ID=16122&Method=FullPatch, Vendor Advisory
http://www.osvdb.org/3399
http://www.securityfocus.com/bid/1314Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/4611

Timeline

Published: Jun 7, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-05396.4Servlet examples in Allaire JRun 2.3.x allow remote attackers to obtain sensitive information, e.g. listing HttpSession ID's via the Session CVE-2000-05405.0JSP sample files in Allaire JRun 2.3.x allow remote attackers to access arbitrary files (e.g. via viewsource.jsp) or obtain configuration in CVE-2000-05417.2The Panda Antivirus console on port 2001 allows local users to execute arbitrary commands without authentication via the CMD command.CVE-2000-05425.0Tigris remote access server before 11.5.4.22 does not properly record Radius accounting information when a user fails the initial login auth CVE-2000-05435.0The command port for PGP Certificate Server 2.5.0 and 2.5.1 allows remote attackers to cause a denial of service if their hostname does not CVE-2000-05445.0Windows NT and Windows 2000 hosts allow a remote attacker to cause a denial of service via malformed DCE/RPC SMBwriteX requests that contain CVE-2000-05454.6Buffer overflow in mailx mail command (aka Mail) on Linux systems allows local users to gain privileges via a long -c (carbon copy) paramete CVE-2000-05465.0Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the lastrealm variable in the set_tgtkey CVE-2000-05475.0Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the localrealm variable in the process_v4 CVE-2000-05485.0Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the e_msg variable in the kerb_err_reply CVE-2000-05495.0Kerberos 4 KDC program does not properly check for null termination of AUTH_MSG_KDC_REQUEST requests, which allows remote attackers to cause CVE-2000-05505.0Kerberos 4 KDC program improperly frees memory twice (aka "double-free"), which allows remote attackers to cause a denial of service.