CVE-2000-0623

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Buffer overflow in O'Reilly WebSite Professional web server 2.4 and earlier allows remote attackers to execute arbitrary commands via a long GET request or Referrer header.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0007&L=ntbugtraq&F=&S=&P=5946Patch, Vendor Advisory
http://www.securityfocus.com/bid/1492Exploit, Patch, Vendor Advisory
http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0007&L=ntbugtraq&F=&S=&P=5946Patch, Vendor Advisory
http://www.securityfocus.com/bid/1492Exploit, Patch, Vendor Advisory

Timeline

Published: Jul 17, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-06247.5Buffer overflow in Winamp 2.64 and earlier allows remote attackers to execute arbitrary commands via a long #EXTINF: extension in the M3U pl CVE-2000-06254.6NetZero 3.0 and earlier uses weak encryption for storing a user's login information, which allows a local user to decrypt the password.CVE-2000-06265.0Buffer overflow in Alibaba web server allows remote attackers to cause a denial of service via a long GET request.CVE-2000-06277.5BlackBoard CourseInfo 4.0 does not properly authenticate users, which allows local users to modify CourseInfo database information and gain CVE-2000-06287.5The source.asp example script in the Apache ASP module Apache::ASP 1.93 and earlier allows remote attackers to modify files.CVE-2000-06297.5The default configuration of the Sun Java web server 2.0 and earlier allows remote attackers to execute arbitrary commands by uploading Java CVE-2000-06305.0IIS 4.0 and 5.0 allows remote attackers to obtain fragments of source code by appending a +.htr to the URL, a variant of the "File Fragment CVE-2000-06315.0An administrative script from IIS 3.0, later included in IIS 4.0 and 5.0, allows remote attackers to cause a denial of service by accessing CVE-2000-06327.5Buffer overflow in the web archive component of L-Soft Listserv 1.8d and earlier allows remote attackers to execute arbitrary commands via a CVE-2000-06332.1Vulnerability in Mandrake Linux usermode package allows local users to to reboot or halt the system.CVE-2000-06345.0The web administration interface for CommuniGate Pro 3.2.5 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) at CVE-2000-06357.5The view_page.html sample page in the MiniVend shopping cart program allows remote attackers to execute arbitrary commands via shell metacha