CVE-2000-1130

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

McAfee WebShield SMTP 4.5 allows remote attackers to bypass email content filtering rules by including Extended ASCII characters in name of the attachment.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2000-11/0324.htmlExploit, Vendor Advisory
http://www.securityfocus.com/bid/1993Exploit, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2000-11/0324.htmlExploit, Vendor Advisory
http://www.securityfocus.com/bid/1993Exploit, Vendor Advisory

Timeline

Published: Jan 9, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-11317.5Bill Kendrick web site guestbook (GBook) allows remote attackers to execute arbitrary commands via shell metacharacters in the _MAILTO form CVE-2000-11326.4DCForum cgforum.cgi CGI script allows remote attackers to read arbitrary files, and delete the program itself, via a malformed "forum" varia CVE-2000-11335.0Authentix Authentix100 allows remote attackers to bypass authentication by inserting a . (dot) into the URL for a protected directory.CVE-2000-11347.2Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when processing << redir CVE-2000-11354.6fshd (fsh daemon) in Debian GNU/Linux allows local users to overwrite files of other users via a symlink attack.CVE-2000-11364.6elvis-tiny before 1.4-10 in Debian GNU/Linux, and possibly other Linux operating systems, allows local users to overwrite files of other use CVE-2000-11374.6GNU ed before 0.2-18.1 allows local users to overwrite the files of other users via a symlink attack.CVE-2000-11387.5Lotus Notes R5 client R5.0.5 and earlier does not properly warn users when an S/MIME email message has been modified, which could allow an a CVE-2000-11397.5The installation of Microsoft Exchange 2000 before Rev. A creates a user account with a known password, which could allow attackers to gain CVE-2000-11402.1Recourse ManTrap 1.6 does not properly hide processes from attackers, which could allow attackers to determine that they are in a honeypot s CVE-2000-11412.1Recourse ManTrap 1.6 modifies the kernel so that ".." does not appear in the /proc listing, which allows attackers to determine that they ar CVE-2000-11422.1Recourse ManTrap 1.6 generates an error when an attacker cd's to /proc/self/cwd and executes the pwd command, which allows attackers to dete