Back
CVE-2000-1149
Buffer overflow in RegAPI.DLL used by Windows NT 4.0 Terminal Server allows remote attackers to execute arbitrary commands via a long username, aka the "Terminal Server Login Buffer Overflow" vulnerability.
Published: Jan 9, 2001
Modified: Apr 16, 2026
CVSS Metrics
Affected Products (1)
| Vendor | Product | Version |
|---|---|---|
| microsoft | windows_nt | terminal_server |
GitHub Security Advisory GHSA-c8q2-5c9q-67pp
Buffer overflow in RegAPI.DLL used by Windows NT 4.0 Terminal Server allows remote attackers to...
References (8)
- http://www.securityfocus.com/archive/1/143991 Exploit, Patch, Vendor Advisory
- http://www.securityfocus.com/bid/1924 Patch, Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-087
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5489
- http://www.securityfocus.com/archive/1/143991 Exploit, Patch, Vendor Advisory
- http://www.securityfocus.com/bid/1924 Patch, Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-087
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5489
Risk Scores
CVSS Score
7.5 / 10
EPSS Score
10.23%
Top 7% most likely to be exploited
Threat Score
33.1 / 100
Data Sources
NVD
EPSS
GitHub