Back
CVE-2000-1149
Buffer overflow in RegAPI.DLL used by Windows NT 4.0 Terminal Server allows remote attackers to execute arbitrary commands via a long username, aka the "Terminal Server Login Buffer Overflow" vulnerability.
Published: Jan 9, 2001
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (1)
| Vendor | Product | Version |
|---|---|---|
| microsoft | windows_nt | terminal_server |
GitHub Security Advisory GHSA-c8q2-5c9q-67pp
Buffer overflow in RegAPI.DLL used by Windows NT 4.0 Terminal Server allows remote attackers to...
References (8)
- http://www.securityfocus.com/archive/1/143991 Exploit, Patch, Vendor Advisory
- http://www.securityfocus.com/bid/1924 Patch, Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-087
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5489
- http://www.securityfocus.com/archive/1/143991 Exploit, Patch, Vendor Advisory
- http://www.securityfocus.com/bid/1924 Patch, Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-087
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5489
Risk Scores
CVSS Score
7.5 / 10
EPSS Score
16.06%
Top 3% most likely to be exploited
Threat Score
34.8 / 100
Data Sources
NVD
EPSS
GitHub