CVE-2000-0561

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Buffer overflow in WebBBS 1.15 allows remote attackers to execute arbitrary commands via a long HTTP GET request.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2000-06/0175.htmlExploit, Patch, Vendor Advisory
http://www.osvdb.org/3544
http://www.securityfocus.com/bid/1365Exploit, Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/4742
http://archives.neohapsis.com/archives/bugtraq/2000-06/0175.htmlExploit, Patch, Vendor Advisory
http://www.osvdb.org/3544
http://www.securityfocus.com/bid/1365Exploit, Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/4742

Timeline

Published: Jun 19, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-05627.5BlackIce Defender 2.1 and earlier, and BlackIce Pro 2.0.23 and earlier, do not properly block Back Orifice traffic when the security setting CVE-2000-056310.0The URLConnection function in MacOS Runtime Java (MRJ) 2.1 and earlier and the Microsoft virtual machine (VM) for MacOS allows a malicious w CVE-2000-05645.0The guestbook CGI program in ICQ Web Front service for ICQ 2000a, 99b, and others allows remote attackers to cause a denial of service via a CVE-2000-05652.1SmartFTP Daemon 0.2 allows a local user to access arbitrary files by uploading and specifying an alternate user configuration file via a .. CVE-2000-05667.2makewhatis in Linux man package allows local users to overwrite files via a symlink attack.CVE-2000-05675.0Buffer overflow in Microsoft Outlook and Outlook Express allows remote attackers to execute arbitrary commands via a long Date field in an e CVE-2000-05685.0Sybergen Secure Desktop 2.1 does not properly protect against false router advertisements (ICMP type 9), which allows remote attackers to mo CVE-2000-05695.0Sybergen Sygate allows remote attackers to cause a denial of service by sending a malformed DNS UDP packet to its internal interface.CVE-2000-05705.0FirstClass Internet Services server 5.770, and other versions before 6.1, allows remote attackers to cause a denial of service by sending an CVE-2000-05716.4LocalWEB HTTP server 1.2.0 allows remote attackers to cause a denial of service via a long GET request.CVE-2000-05724.6The Razor configuration management tool uses weak encryption for its password file, which allows local users to gain privileges.CVE-2000-057310.0The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to exec