CVE-2000-0908

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 9.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2000-12-19 · updated 2026-09-23

Description

BrowseGate 2.80 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long Authorization or Referer MIME headers in the HTTP request.

Affected products

Netcplus Browsegate: 2.80

References

http://archives.neohapsis.com/archives/win2ksecadvice/2000-q3/0128.html
http://marc.info/?l=bugtraq&m=96956211605302&w=2
http://www.netcplus.com/browsegate.htm#BGLatest
http://www.securityfocus.com/bid/1702
https://exchange.xforce.ibmcloud.com/vulnerabilities/5270
http://archives.neohapsis.com/archives/win2ksecadvice/2000-q3/0128.html
http://marc.info/?l=bugtraq&m=96956211605302&w=2
http://www.netcplus.com/browsegate.htm#BGLatest
http://www.securityfocus.com/bid/1702
https://exchange.xforce.ibmcloud.com/vulnerabilities/5270

Get alerted when CVE-2000-0908 or the next vulnerability affects your stack