CVE-2000-0750

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Buffer overflow in mopd (Maintenance Operations Protocol loader daemon) allows remote attackers to execute arbitrary commands via a long file name.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2000-08/0064.htmlVendor Advisory
http://archives.neohapsis.com/archives/freebsd/2000-08/0336.htmlPatch, Vendor Advisory
http://cvsweb.netbsd.org/bsdweb.cgi/basesrc/usr.sbin/mopd/mopd/process.c.diff?r1=1.7&r2=1.8&f=h
http://www.openbsd.org/errata.html#mopd
http://www.redhat.com/support/errata/RHSA-2000-050.html
http://www.securityfocus.com/bid/1558Patch, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2000-08/0064.htmlVendor Advisory
http://archives.neohapsis.com/archives/freebsd/2000-08/0336.htmlPatch, Vendor Advisory
http://cvsweb.netbsd.org/bsdweb.cgi/basesrc/usr.sbin/mopd/mopd/process.c.diff?r1=1.7&r2=1.8&f=h
http://www.openbsd.org/errata.html#mopd
http://www.redhat.com/support/errata/RHSA-2000-050.html
http://www.securityfocus.com/bid/1558Patch, Vendor Advisory

Timeline

Published: Oct 20, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-07517.5mopd (Maintenance Operations Protocol loader daemon) does not properly cleanse user-injected format strings, which allows remote attackers t CVE-2000-07527.2Buffer overflows in brouted in FreeBSD and possibly other OSes allows local users to gain root privileges via long command line arguments.CVE-2000-07535.0The Microsoft Outlook mail client identifies the physical path of the sender's machine within a winmail.dat attachment to Rich Text Format (CVE-2000-07542.1Vulnerability in HP OpenView Network Node Manager (NMM) version 6.1 related to passwords.CVE-2000-07554.6Vulnerability in the newgrp command in HP-UX 11.00 allows local users to gain privileges.CVE-2000-07565.0Microsoft Outlook 2000 does not properly process long or malformed fields in vCard (.vcf) files, which allows attackers to cause a denial of CVE-2000-075710.0The sysgen service in Aptis Totalbill does not perform authentication, which allows remote attackers to gain root privileges by connecting t CVE-2000-07584.6The web interface for Lyris List Manager 3 and 4 allows list subscribers to obtain administrative access by modifying the value of the list_CVE-2000-07596.4Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates CVE-2000-07606.4The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexist CVE-2000-07615.0OS2/Warp 4.5 FTP server allows remote attackers to cause a denial of service via a long username.CVE-2000-076210.0The default installation of eTrust Access Control (formerly SeOS) uses a default encryption key, which allows remote attackers to spoof the