CVE-2000-0629

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

The default configuration of the Sun Java web server 2.0 and earlier allows remote attackers to execute arbitrary commands by uploading Java code to the server via board.html, then directly calling the JSP compiler servlet.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published
Jul 12, 2000
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-06305.0IIS 4.0 and 5.0 allows remote attackers to obtain fragments of source code by appending a +.htr to the URL, a variant of the "File Fragment CVE-2000-06315.0An administrative script from IIS 3.0, later included in IIS 4.0 and 5.0, allows remote attackers to cause a denial of service by accessing CVE-2000-06327.5Buffer overflow in the web archive component of L-Soft Listserv 1.8d and earlier allows remote attackers to execute arbitrary commands via aCVE-2000-06332.1Vulnerability in Mandrake Linux usermode package allows local users to to reboot or halt the system.CVE-2000-06345.0The web administration interface for CommuniGate Pro 3.2.5 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) atCVE-2000-06357.5The view_page.html sample page in the MiniVend shopping cart program allows remote attackers to execute arbitrary commands via shell metachaCVE-2000-06365.0HP JetDirect printers versions G.08.20 and H.08.20 and earlier allow remote attackers to cause a denial of service via a malformed FTP quoteCVE-2000-06374.6Microsoft Excel 97 and 2000 allows an attacker to execute arbitrary commands by specifying a malicious .dll using the Register.ID function, CVE-2000-063810.0bb-hostsvc.sh in Big Brother 1.4h1 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack on the HOSTSVC paraCVE-2000-06397.5The default configuration of Big Brother 1.4h2 and earlier does not include proper access restrictions, which allows remote attackers to exeCVE-2000-06407.5Guild FTPd allows remote attackers to determine the existence of files outside the FTP root via a .. (dot dot) attack, which provides differCVE-2000-06417.5Savant web server allows remote attackers to execute arbitrary commands via a long GET request.
CVE-2000-0629: High severity, CVSS 7.5 | Vulnix