CVE-2000-1022
The mailguard feature in Cisco Secure PIX Firewall 5.2(2) and earlier does not properly restrict...
The mailguard feature in Cisco Secure PIX Firewall 5.2(2) and earlier does not properly restrict access to SMTP commands, which allows remote attackers to execute restricted commands by sending a DATA command before sending the restricted commands.
Exploit likelihood
What each source reports
NVD Score used
7.5
The mailguard feature in Cisco Secure PIX Firewall 5.2(2) and earlier does not properly restrict access to SMTP commands, which allows remote attackers to execute restricted commands by sending a DATA command before sending the restricted commands.
- Record
CVE-2000-1022- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
The mailguard feature in Cisco Secure PIX Firewall 5.2(2) and earlier does not properly restrict access to SMTP commands, which allows remote attackers to execute restricted commands by sending a DATA command before sending the restricted commands.
- Record
CVE-2000-1022- Updated
- 2026-11-02
EUVDEUVD-2000-1009 No score
The mailguard feature in Cisco Secure PIX Firewall 5.2(2) and earlier does not properly restrict access to SMTP commands, which allows remote attackers to execute restricted commands by sending a DATA command before sending the restricted commands.
- Record
EUVD-2000-1009- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gv87-wvw4-8qwm No score
The mailguard feature in Cisco Secure PIX Firewall 5.2(2) and earlier does not properly restrict...
The mailguard feature in Cisco Secure PIX Firewall 5.2(2) and earlier does not properly restrict access to SMTP commands, which allows remote attackers to execute restricted commands by sending a DATA command before sending the restricted commands.
- Record
GHSA-gv87-wvw4-8qwm- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Cisco PIX Firewall 4.x/5.x - SMTP Content Filtering Evasion | 2000-09-19 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2000-1022 is a high vulnerability (CVSS 7.5) in Cisco Pix Firewall Software, published December 11, 2000. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 7.10%, the 94th percentile. No source names a fixed version.
References
securityfocus.com/bid/1698
exchange.xforce.ibmcloud.com/vulnerabilities/5277
cisco.com/warp/public/707/PIXfirewallSMTPfilter-pub.shtml
archives.neohapsis.com/archives/bugtraq/2000-09/0241.html
archives.neohapsis.com/archives/bugtraq/2000-09/0222.html
nvd.nist.gov/vuln/detail/CVE-2000-1022
github.com/advisories/GHSA-gv87-wvw4-8qwm