Every CVE Search/ Get API key

CVE-2000-0589

SawMill 5.0.21 uses weak encryption to store passwords, which allows attackers to easily decrypt...

7.5 HighPublic exploit

SawMill 5.0.21 uses weak encryption to store passwords, which allows attackers to easily decrypt the password and modify the SawMill configuration.

Exploit likelihood

3.67%Down 0.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

SawMill 5.0.21 uses weak encryption to store passwords, which allows attackers to easily decrypt the password and modify the SawMill configuration.

Record
CVE-2000-0589
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-310
Updated
2026-11-02
CVE List No score

SawMill 5.0.21 uses weak encryption to store passwords, which allows attackers to easily decrypt the password and modify the SawMill configuration.

Record
CVE-2000-0589
Updated
2026-11-02
EUVDEUVD-2000-0585 No score

SawMill 5.0.21 uses weak encryption to store passwords, which allows attackers to easily decrypt the password and modify the SawMill configuration.

Record
EUVD-2000-0585
Updated
2026-11-03
GitHub AdvisoriesGHSA-6r6c-fvxf-rg87 No score

SawMill 5.0.21 uses weak encryption to store passwords, which allows attackers to easily decrypt...

SawMill 5.0.21 uses weak encryption to store passwords, which allows attackers to easily decrypt the password and modify the SawMill configuration.

Record
GHSA-6r6c-fvxf-rg87
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBFlowerfire Sawmill 5.0.21 - Weak Password Encryption2000-06-26

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2000-0589 is a high vulnerability (CVSS 7.5) in Sawmill, published June 26, 2000. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.67%, the 89th percentile. No source names a fixed version.

References

MoveEnter Open