Every CVESearch/Get API key

CVE-2000-0584

Buffer overflow in Canna input system allows remote attackers to execute arbitrary commands via...

10.0 HighPublic exploit

Buffer overflow in Canna input system allows remote attackers to execute arbitrary commands via an SR_INIT command with a long user name or group name.

Exploit likelihood

5.86%Up 1.4 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used10.0

Buffer overflow in Canna input system allows remote attackers to execute arbitrary commands via an SR_INIT command with a long user name or group name.

Record
CVE-2000-0584
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Updated
2026-11-02
CVE ListNo score

Buffer overflow in Canna input system allows remote attackers to execute arbitrary commands via an SR_INIT command with a long user name or group name.

Record
CVE-2000-0584
Updated
2026-11-02
EUVDEUVD-2000-0580No score

Buffer overflow in Canna input system allows remote attackers to execute arbitrary commands via an SR_INIT command with a long user name or group name.

Record
EUVD-2000-0580
Updated
2026-11-03
GitHub AdvisoriesGHSA-756c-jfq2-c688No score

Buffer overflow in Canna input system allows remote attackers to execute arbitrary commands via...

Buffer overflow in Canna input system allows remote attackers to execute arbitrary commands via an SR_INIT command with a long user name or group name.

Record
GHSA-756c-jfq2-c688
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBCanna Canna 3.5 b2 - Remote Buffer Overflow2000-07-02

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2000-0584 is a high vulnerability (CVSS 10.0) in Debian Linux, published July 2, 2000. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 5.86%, the 93rd percentile. No source names a fixed version.

References

MoveEnter Open