CVE-2000-1077

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2000-12-11 · updated 2026-09-23

Description

Buffer overflow in the SHTML logging functionality of iPlanet Web Server 4.x allows remote attackers to execute arbitrary commands via a long filename with a .shtml extension.

Affected products

Iplanet Web Server: 4.x

References

http://www.securityfocus.com/archive/1/141435
https://exchange.xforce.ibmcloud.com/vulnerabilities/5446
http://www.securityfocus.com/archive/1/141435
https://exchange.xforce.ibmcloud.com/vulnerabilities/5446

Get alerted when CVE-2000-1077 or the next vulnerability affects your stack