National Vulnerability Database (CVE-2000-0401)

National Cyber-Alert System Vulnerability Summary: CVE-2000-0401
Orirignal release date: 2000-05-01 Source: US-CERT/NIST ### Overview Buffer overflows in redirect.exe and changepw.exe in PDGSoft shopping cart allow remote attackers to execute arbitrary commands via a long query string. ### Impact CVSS Severity: 7 (High) Range: remote Authentication: input buffer="1" Impact Type: sec_prot other="1" ### Reference to Advisories, Solutions, and Tools External Source: ISS X-Force Name: pdgsoft-changepw-bo(4546) Hyperlink: http://xforce.iss.net/static/4546.php External Source: ISS X-Force Name: pdgsoft-redirect-bo(4545) Hyperlink: http://xforce.iss.net/static/4545.php External Source: CONFIRM Name: http://www.pdgsoft.com/Security/security2.html Hyperlink: http://www.pdgsoft.com/Security/security2.html External Source: BID Name: 1256 Hyperlink: http://www.securityfocus.com/bid/1256 External Source: BUGTRAQ Name: amp Hyperlink: http://marc.theaimsgroup.com/?l=bugtraq& External Source: NTBUGTRAQ Name: amp Hyperlink: http://marc.theaimsgroup.com/?l=ntbugtraq& ### Vulnerable Software and Vendor PDG Shopping Cart (PDGSoft) Technical Details CVE Standard Vulnerability Entry: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0401