CVE-2000-1174
Multiple buffer overflows in AFS ACL parser for Ethereal 0.8.13 and earlier allows remote...
CVE-2000-1174 is a high vulnerability (CVSS 7.5) in Ethereal Group Ethereal, published January 9, 2001. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 5.82%, the 93rd percentile. No source names a fixed version.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 5.82%EPSS, 93rd percentile
- Exploitation
- None known1 public exploit
- Fixed in
- No fix listedNo source names one
Description
Multiple buffer overflows in AFS ACL parser for Ethereal 0.8.13 and earlier allows remote attackers to execute arbitrary commands via a packet with a long username.
Exploit likelihood
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Ethereal - AFS Buffer Overflow | 2000-11-18 |
What each source reports
NVD Score used
Multiple buffer overflows in AFS ACL parser for Ethereal 0.8.13 and earlier allows remote attackers to execute arbitrary commands via a packet with a long username.
- Record
CVE-2000-1174- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
Multiple buffer overflows in AFS ACL parser for Ethereal 0.8.13 and earlier allows remote attackers to execute arbitrary commands via a packet with a long username.
- Record
CVE-2000-1174- Updated
- 2026-11-02
EUVDEUVD-2000-1159No score
Multiple buffer overflows in AFS ACL parser for Ethereal 0.8.13 and earlier allows remote attackers to execute arbitrary commands via a packet with a long username.
- Record
EUVD-2000-1159- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-22xj-gc32-5pwqNo score
Multiple buffer overflows in AFS ACL parser for Ethereal 0.8.13 and earlier allows remote...
Multiple buffer overflows in AFS ACL parser for Ethereal 0.8.13 and earlier allows remote attackers to execute arbitrary commands via a packet with a long username.
- Record
GHSA-22xj-gc32-5pwq- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
archives.neohapsis.com/archives/bugtraq/2000-11/0251.html
debian.org/security/2000/20001122a
exchange.xforce.ibmcloud.com/vulnerabilities/5557
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000342
securityfocus.com/bid/1972
redhat.com/support/errata/RHSA-2000-116.html
nvd.nist.gov/vuln/detail/CVE-2000-1174
github.com/advisories/GHSA-22xj-gc32-5pwq