CVE-2000-0423

Medium

Published: 05/05/2000(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

7.78%

94th percentile - higher than 94% of all known CVEs

Summary

Buffer overflow in the Netwin DNEWSWEB CGI program allows remote attackers to execute arbitrary commands via long parameters such as group, cmd, and utag.

Risk Assessment

Attackers may gain full control over the system, posing a serious security threat to the organization.

Recommendation

It is recommended to update the software to the latest version and implement restrictions on parameter length in the application.

Original NVD description (English source)

Buffer overflow in Netwin DNEWSWEB CGI program allows remote attackers to execute arbitrary commands via long parameters such as group, cmd, and utag.