Lucene search

[email protected]CVE-2000-0990

HistoryJan 22, 2001 - 5:00 a.m.

CVE-2000-0990

2001-01-2205:00:00

[email protected]

web.nvd.nist.gov

nvd

cve-2000-0990

cmd5checkpw

remote attack

service denial

7.2 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.008 Low

EPSS

Percentile

81.4%

JSON

cmd5checkpw 0.21 and earlier allows remote attackers to cause a denial of service via an “SMTP AUTH” command with an unknown username.

Affected configurations

NVD

Node

krzysztof_dabrowskicmd5checkpwMatch0.20

krzysztof_dabrowskicmd5checkpwMatch0.21

CPENameOperatorVersion
krzysztof_dabrowski:cmd5checkpwkrzysztof dabrowski cmd5checkpweq0.20
krzysztof_dabrowski:cmd5checkpwkrzysztof dabrowski cmd5checkpweq0.21

CPE	Name	Operator	Version
krzysztof_dabrowski:cmd5checkpw	krzysztof dabrowski cmd5checkpw	eq	0.20
krzysztof_dabrowski:cmd5checkpw	krzysztof dabrowski cmd5checkpw	eq	0.21

References

archives.neohapsis.com/archives/bugtraq/2000-10/0258.html

members.elysium.pl/brush/cmd5checkpw/changes.html

www.securityfocus.com/bid/1809

exchange.xforce.ibmcloud.com/vulnerabilities/5382

7.2 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.008 Low

EPSS

Percentile

81.4%

JSON

Related for CVE-2000-0990

cvelist1 nvd1