CyberSec.Space Logo
CVEブラウザに戻る

CVE-2000-0109

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0580%
EPSS Percentile3.79th
Published2000年1月31日
Last Modified2026年4月16日

Vulnerability Description

The mcsp Client Site Processor system (MultiCSP) in Standard and Poor's ComStock is installed with several accounts that have no passwords or easily guessable default passwords.

Affected Platforms (CPE)

📦
Comstock

Multicsp

= 4.2

References & Advisories

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0109
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0109

関連する脆弱性情報

CVE-2000-004010.0

glFtpD allows local users to gain privileges via metacharacters in the SITE ZIPCHK command.

CVE-2000-003210.0

Solaris dmi_cmd allows local users to crash the dmispd daemon by adding a malformed file to the /var/dmi/db database.

CVE-2000-000210.0

Buffer overflow in ZBServer Pro 1.50 allows remote attackers to execute commands via a long GET request.

CVE-2000-017710.0

DNSTools CGI applications allow remote attackers to execute arbitrary commands via shell metacharacters.