CVE-2000-0583
Last modified
CVE-2000-0583 is a vulnerability of currently unknown severity. vchkpw program in vpopmail before version 4.8 does not properly cleanse an untrusted format string used in a call to syslog, which allows remote attackers to cause a denial of service via a USER or PASS command that contains arbitrary formatting directives.. EPSS estimates a 1.67% chance of exploitation in the next 30 days.
Description
vchkpw program in vpopmail before version 4.8 does not properly cleanse an untrusted format string used in a call to syslog, which allows remote attackers to cause a denial of service via a USER or PASS command that contains arbitrary formatting directives.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Inter7 | Vpopmail Vchkpw | 4.5 |
| Inter7 | Vpopmail Vchkpw | 4.7 |
References
- http://www.vpopmail.cx/vpopmail-ChangeLogURL Repurposed
- http://www.vpopmail.cx/vpopmail-ChangeLogURL Repurposed
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2000-0583?
How severe is CVE-2000-0583?
How do I fix CVE-2000-0583?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2000
- CVE-2000-0577Netscape Professional Services FTP Server 1.3.6 allows remot…
- CVE-2000-0578SGI MIPSPro compilers C, C++, F77 and F90 generate temporary…
- CVE-2000-0579IRIX crontab creates temporary files with predictable file n…
- CVE-2000-0580Windows 2000 Server allows remote attackers to cause a denia…
- CVE-2000-0581Windows 2000 Telnet Server allows remote attackers to cause …
- CVE-2000-0582Check Point FireWall-1 4.0 and 4.1 allows remote attackers t…
- CVE-2000-0584Buffer overflow in Canna input system allows remote attacker…
- CVE-2000-0585ISC DHCP client program dhclient allows remote attackers to …
- CVE-2000-0586Buffer overflow in Dalnet IRC server 4.6.5 allows remote att…
- CVE-2000-0587The privpath directive in glftpd 1.18 allows remote attacker…
- CVE-2000-0588SawMill 5.0.21 CGI program allows remote attackers to read t…
- CVE-2000-0589SawMill 5.0.21 uses weak encryption to store passwords, whic…
Are you affected by CVE-2000-0583?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST