CVE-2000-0894

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

HTTP server on the WatchGuard SOHO firewall does not properly restrict access to administrative functions such as password resets or rebooting, which allows attackers to cause a denial of service or conduct unauthorized activities.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published
Feb 12, 2001
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-089510.0Buffer overflow in HTTP server on the WatchGuard SOHO firewall allows remote attackers to cause a denial of service and possibly execute arbCVE-2000-08965.0WatchGuard SOHO firewall allows remote attackers to cause a denial of service via a flood of fragmented IP packets, which causes the firewalCVE-2000-08975.0Small HTTP Server 2.03 and earlier allows remote attackers to cause a denial of service by repeatedly requesting a URL that references a dirCVE-2000-08985.0Small HTTP Server 2.01 does not properly process Server Side Includes (SSI) tags that contain null values, which allows local users, and posCVE-2000-08995.0Small HTTP Server 2.01 allows remote attackers to cause a denial of service by connecting to the server and sending out multiple GET, HEAD, CVE-2000-09007.5Directory traversal vulnerability in ssi CGI program in thttpd 2.19 and earlier allows remote attackers to read arbitrary files via a "%2e%2CVE-2000-09014.6Format string vulnerability in screen 3.9.5 and earlier allows local users to gain root privileges via format characters in the vbell_msg inCVE-2000-09025.0getalbum.php in PhotoAlbum before 0.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) attack.CVE-2000-09035.0Directory traversal vulnerability in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read arbitrary files CVE-2000-09045.0Voyager web server 2.01B in the demo disks for QNX 405 stores sensitive web client information in the .photon directory in the web document CVE-2000-09055.0QNX Embedded Resource Manager in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read sensitive system staCVE-2000-09065.0Directory traversal vulnerability in Moreover.com cached_feed.cgi script version 4.July.00 allows remote attackers to read arbitrary files v
CVE-2000-0894: Critical severity, CVSS 10.0 | Vulnix