Unscored severity · published Jun 26, 2000
CVE-2000-0600
Netscape Enterprise Server in NetWare 5.1 allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed URL
–
CVSS
2.4%
EPSS
No
On KEV
Description
Netscape Enterprise Server in NetWare 5.1 allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed URL.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ES
Enterprise Server · Netscape
4.1.1; 5.0 · source: NVD
NE
Netware · Novell
5.0; 5.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2000-0600
CVE.org
https://www.cve.org/CVERecord?id=CVE-2000-0600
Exploit
http://archives.neohapsis.com/archives/bugtraq/2000-06/0264.html
Exploit
http://www.securityfocus.com/bid/1393
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/4780
More from Enterprise Server
7.0
CVE-1999-0012
Some web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file names
6.1
CVE-2018-18940
servlet/SnoopServlet (a servlet installed by default) in Netscape Enterprise 3.63 has reflected XSS via an arbitrary parameter=[XSS] in the query string
–
CVE-2004-0826
Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code via a modified record length field in an SSLv2…
–
CVE-2002-1655
The Web Publishing feature in Netscape Enterprise Server 3.x and iPlanet Web Server 4.x allows remote attackers to cause a denial of service (crash) via a wp-html-rend request
–
CVE-2002-1654
iPlanet Web Server Enterprise Edition and Netscape Enterprise Server 4.0 and 4.1 allows remote attackers to conduct HTTP Basic Authentication via the wp-force-auth Web Publisher…