CVE-2000-0757

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

The sysgen service in Aptis Totalbill does not perform authentication, which allows remote attackers to gain root privileges by connecting to the service and specifying the commands to be executed.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2000-08/0074.htmlVendor Advisory
http://www.securityfocus.com/bid/1555Exploit, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2000-08/0074.htmlVendor Advisory
http://www.securityfocus.com/bid/1555Exploit, Vendor Advisory

Timeline

Published: Oct 20, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-07584.6The web interface for Lyris List Manager 3 and 4 allows list subscribers to obtain administrative access by modifying the value of the list_CVE-2000-07596.4Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates CVE-2000-07606.4The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexist CVE-2000-07615.0OS2/Warp 4.5 FTP server allows remote attackers to cause a denial of service via a long username.CVE-2000-076210.0The default installation of eTrust Access Control (formerly SeOS) uses a default encryption key, which allows remote attackers to spoof the CVE-2000-07637.2xlockmore and xlockf do not properly cleanse user-injected format strings, which allows local users to gain root privileges via the -d optio CVE-2000-07645.0Intel Express 500 series switches allow a remote attacker to cause a denial of service via a malformed IP packet.CVE-2000-07655.1Buffer overflow in the HTML interpreter in Microsoft Office 2000 allows an attacker to execute arbitrary commands via a long embedded object CVE-2000-07667.5Buffer overflow in vqSoft vqServer 1.4.49 allows remote attackers to cause a denial of service or possibly gain privileges via a long HTTP G CVE-2000-07672.6The ActiveX control for invoking a scriptlet in Internet Explorer 4.x and 5.x renders arbitrary file types instead of HTML, which allows an CVE-2000-07682.6A function in Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote at CVE-2000-07697.5O'Reilly WebSite Pro 2.3.7 installs the uploader.exe program with execute permissions for all users, which allows remote attackers to create