Lucene search
MitreCVE-2000-0857HistoryNov 14, 2000 - 5:00 a.m.
CVE-2000-0857
2000-11-1405:00:00
mitre
web.nvd.nist.gov
35
irc server
muh 2.05d
user-injected format strings
denial of service
arbitrary commands
cve-2000-0857.
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8
Confidence
High
EPSS
0.004
Percentile
74.0%
The logging capability in muh 2.05d IRC server does not properly cleanse user-injected format strings, which allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed nickname.
Affected configurations
Node
sebastian_kienzlmuhMatch2.05d
| Vendor | Product | Version | CPE |
|---|---|---|---|
| sebastian_kienzl | muh | 2.05d | cpe:2.3:a:sebastian_kienzl:muh:2.05d:*:*:*:*:*:*:* |
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8
Confidence
High
EPSS
0.004
Percentile
74.0%
Related for CVE-2000-0857