Every CVE Search/ Get API key

CVE-2000-0584

Buffer overflow in Canna input system allows remote attackers to execute arbitrary commands via...

10.0 HighPublic exploit

Buffer overflow in Canna input system allows remote attackers to execute arbitrary commands via an SR_INIT command with a long user name or group name.

Exploit likelihood

5.86%Up 1.4 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 10.0

Buffer overflow in Canna input system allows remote attackers to execute arbitrary commands via an SR_INIT command with a long user name or group name.

Record
CVE-2000-0584
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Updated
2026-11-02
CVE List No score

Buffer overflow in Canna input system allows remote attackers to execute arbitrary commands via an SR_INIT command with a long user name or group name.

Record
CVE-2000-0584
Updated
2026-11-02
EUVDEUVD-2000-0580 No score

Buffer overflow in Canna input system allows remote attackers to execute arbitrary commands via an SR_INIT command with a long user name or group name.

Record
EUVD-2000-0580
Updated
2026-11-03
GitHub AdvisoriesGHSA-756c-jfq2-c688 No score

Buffer overflow in Canna input system allows remote attackers to execute arbitrary commands via...

Buffer overflow in Canna input system allows remote attackers to execute arbitrary commands via an SR_INIT command with a long user name or group name.

Record
GHSA-756c-jfq2-c688
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBCanna Canna 3.5 b2 - Remote Buffer Overflow2000-07-02

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2000-0584 is a high vulnerability (CVSS 10.0) in Debian Linux, published July 2, 2000. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 5.86%, the 93rd percentile. No source names a fixed version.

References

MoveEnter Open