Lucene search

[email protected]CVE-2000-0741

HistoryOct 20, 2000 - 4:00 a.m.

CVE-2000-0741

2000-10-2004:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2000-0741

vulnerability

nai net tools

pki server

arbitrary code execution

url

.xuda extension

nvd

7.8 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.018 Low

EPSS

Percentile

87.8%

JSON

Format string vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to execute arbitrary code via format strings in a URL with a .XUDA extension.

CPENameOperatorVersion
network_associates:net_tools_pki_servernetwork associates net tools pki servereq1.0hotfix1
network_associates:net_tools_pki_servernetwork associates net tools pki servereq1.0hotfix2
network_associates:net_tools_pki_servernetwork associates net tools pki servereq1.0

CPE	Name	Operator	Version
network_associates:net_tools_pki_server	network associates net tools pki server	eq	1.0hotfix1
network_associates:net_tools_pki_server	network associates net tools pki server	eq	1.0hotfix2
network_associates:net_tools_pki_server	network associates net tools pki server	eq	1.0

References

archives.neohapsis.com/archives/bugtraq/2000-07/0473.html

download.nai.com/products/licensed/pgp/hf3pki10.txt

www.osvdb.org/1490

www.securityfocus.com/bid/1538

7.8 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.018 Low

EPSS

Percentile

87.8%

JSON

Related for CVE-2000-0741

coresecurity1