Unscored severity · published Jan 21, 2000
CVE-2000-0091
Buffer overflow in vchkpw/vpopmail POP authentication package allows remote attackers to gain root privileges via a long username or password
–
CVSS
12.9%
EPSS
No
On KEV
Description
Buffer overflow in vchkpw/vpopmail POP authentication package allows remote attackers to gain root privileges via a long username or password.
Exploitation
Is it being used?
Exploit prediction (EPSS)12.9% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VP
Vpopmail · Inter7
vchkpw_3.4.1; vchkpw_3.4.2; vchkpw_3.4.3; vchkpw_3.4.4; vchkpw_3.4.5; vchkpw_3.4.6; +4 more · source: NVD
Affected product
VP
Vpopmail
Inter7
More from Vpopmail
–
CVE-2001-0990
Inter7 vpopmail 4.10.35 and earlier, when using the MySQL module, compiles authentication information in cleartext into the libvpopmail.a library, which allows local users to…