CVE-2000-0741

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Format string vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to execute arbitrary code via format strings in a URL with a .XUDA extension.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2000-07/0473.htmlVendor Advisory
http://download.nai.com/products/licensed/pgp/hf3pki10.txt
http://www.osvdb.org/1490
http://www.securityfocus.com/bid/1538Exploit, Patch, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2000-07/0473.htmlVendor Advisory
http://download.nai.com/products/licensed/pgp/hf3pki10.txt
http://www.osvdb.org/1490
http://www.securityfocus.com/bid/1538Exploit, Patch, Vendor Advisory

Timeline

Published: Oct 20, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-07425.0The IPX protocol implementation in Microsoft Windows 95 and 98 allows remote attackers to cause a denial of service by sending a ping packet CVE-2000-074310.0Buffer overflow in University of Minnesota (UMN) gopherd 2.x allows remote attackers to execute arbitrary commands via a DES key generation CVE-2000-07457.5admin.php3 in PHP-Nuke does not properly verify the PHP-Nuke administrator password, which allows remote attackers to gain privileges by req CVE-2000-07467.5Vulnerabilities in IIS 4.0 and 5.0 do not properly protect against cross-site scripting (CSS) attacks. They allow a malicious web site oper CVE-2000-074710.0The logrotate script for OpenLDAP before 1.2.11 in Conectiva Linux sends an improper signal to the kernel log daemon (klogd) and kills it.CVE-2000-07484.6OpenLDAP 1.2.11 and earlier improperly installs the ud binary with group write permissions, which could allow any user in that group to repl CVE-2000-07497.2Buffer overflow in the Linux binary compatibility module in FreeBSD 3.x through 5.x allows local users to gain root privileges via long file CVE-2000-07507.5Buffer overflow in mopd (Maintenance Operations Protocol loader daemon) allows remote attackers to execute arbitrary commands via a long fil CVE-2000-07517.5mopd (Maintenance Operations Protocol loader daemon) does not properly cleanse user-injected format strings, which allows remote attackers t CVE-2000-07527.2Buffer overflows in brouted in FreeBSD and possibly other OSes allows local users to gain root privileges via long command line arguments.CVE-2000-07535.0The Microsoft Outlook mail client identifies the physical path of the sender's machine within a winmail.dat attachment to Rich Text Format (CVE-2000-07542.1Vulnerability in HP OpenView Network Node Manager (NMM) version 6.1 related to passwords.