Unrated severityNVD Advisory· Published Jun 30, 2000· Updated Jun 16, 2026
CVE-2000-0583
CVE-2000-0583
Description
vchkpw program in vpopmail before version 4.8 does not properly cleanse an untrusted format string used in a call to syslog, which allows remote attackers to cause a denial of service via a USER or PASS command that contains arbitrary formatting directives.
Affected products
3cpe:2.3:a:inter7:vpopmail_vchkpw:4.5:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:inter7:vpopmail_vchkpw:4.5:*:*:*:*:*:*:*
- cpe:2.3:a:inter7:vpopmail_vchkpw:4.7:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.