CVE-2000-1158

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

NAI Sniffer Agent uses base64 encoding for authentication, which allows attackers to sniff the network and easily decrypt usernames and passwords.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Jan 9, 2001
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-11597.5NAI Sniffer Agent allows remote attackers to gain privileges on the agent by sniffing the initial UDP authentication packets and spoofing coCVE-2000-11605.0NAI Sniffer Agent allows remote attackers to cause a denial of service (crash) by sending a large number of login requests.CVE-2000-11617.5The installation of AdCycle banner management system leaves the build.cgi program in a web-accessible directory, which allows remote attackeCVE-2000-11623.7ghostscript before 5.10-16 allows local users to overwrite files of other users via a symlink attack.CVE-2000-11634.6ghostscript before 5.10-16 uses an empty LD_RUN_PATH environmental variable to find libraries in the current directory, which could allow loCVE-2000-11649.0WinVNC installs the WinVNC3 registry key with permissions that give Special Access (read and modify) to the Everybody group, which allows usCVE-2000-11655.0Balabit syslog-ng allows remote attackers to cause a denial of service (application crash) via a malformed log message that does not have a CVE-2000-11667.5Twig webmail system does not properly set the "vhosts" variable if it is not configured on the site, which allows remote attackers to insertCVE-2000-11677.5ppp utility in FreeBSD 4.1.1 and earlier does not properly restrict access as specified by the "nat deny_incoming" command, which allows remCVE-2000-11687.5IBM HTTP Server 1.3.6 (based on Apache) allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a lCVE-2000-11697.5OpenSSH SSH client before 2.3.0 does not properly disable X11 or agent forwarding, which could allow a malicious SSH server to gain access tCVE-2000-11707.5Buffer overflow in Netsnap webcam HTTP server before 1.2.9 allows remote attackers to execute arbitrary commands via a long GET request.
CVE-2000-1158: High severity, CVSS 7.5 | Vulnix