CVE-2000-1022

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

The mailguard feature in Cisco Secure PIX Firewall 5.2(2) and earlier does not properly restrict access to SMTP commands, which allows remote attackers to execute restricted commands by sending a DATA command before sending the restricted commands.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

Timeline

Published: Dec 11, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-10237.5The Alabanza Control Panel does not require passwords to access administrative commands, which allows remote attackers to modify domain name CVE-2000-102410.0eWave ServletExec 3.0C and earlier does not restrict access to the UploadServlet Java/JSP servlet, which allows remote attackers to upload f CVE-2000-10255.0eWave ServletExec JSP/Java servlet engine, versions 3.0C and earlier, allows remote attackers to cause a denial of service via a URL that co CVE-2000-102610.0Multiple buffer overflows in LBNL tcpdump allow remote attackers to execute arbitrary commands.CVE-2000-10275.0Cisco Secure PIX Firewall 5.2(2) allows remote attackers to determine the real IP address of a target FTP server by flooding the server with CVE-2000-10287.2Buffer overflow in cu program in HP-UX 11.0 may allow local users to gain privileges via a long -l command line argument.CVE-2000-102910.0Buffer overflow in host command allows a remote attacker to execute arbitrary commands via a long response to an AXFR query.CVE-2000-10305.0CS&T CorporateTime for the Web returns different error messages for invalid usernames and invalid passwords, which allows remote attackers t CVE-2000-10314.6Buffer overflow in dtterm in HP-UX 11.0 and HP Tru64 UNIX 4.0f through 5.1a allows local users to execute arbitrary code via a long -tn opti CVE-2000-10325.0The client authentication interface for Check Point Firewall-1 4.0 and earlier generates different error messages for invalid usernames vers CVE-2000-10337.5Serv-U FTP Server allows remote attackers to bypass its anti-hammering feature by first logging on as a valid user (possibly anonymous) and CVE-2000-103410.0Buffer overflow in the System Monitor ActiveX control in Windows 2000 allows remote attackers to execute arbitrary commands via a long LogFi