First published: Fri Feb 04 2000(Updated: )
Buffer overflow in the SHGetPathFromIDList function of the Serv-U FTP server allows attackers to cause a denial of service by performing a LIST command on a malformed .lnk file.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Windows NT | =4.0 | |
Microsoft Windows 9x | ||
Microsoft Windows 9x | =gold |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2000-0129 is a critical vulnerability that allows attackers to exploit a buffer overflow, potentially leading to a denial of service.
To mitigate CVE-2000-0129, users should update to a non-vulnerable version of the Serv-U FTP server software or apply patches from the vendor.
CVE-2000-0129 primarily affects Microsoft Windows NT 4.0, Windows 95, and Windows 98 operating systems.
To protect against CVE-2000-0129, avoid using the affected Serv-U FTP server with malformed .lnk files and implement proper input validation.
Yes, exploits for CVE-2000-0129 have been reported that allow attackers to disrupt service by sending specific malformed requests.