Back

CVE-2000-1149

Buffer overflow in RegAPI.DLL used by Windows NT 4.0 Terminal Server allows remote attackers to execute arbitrary commands via a long username, aka the "Terminal Server Login Buffer Overflow" vulnerability.

Published: Jan 9, 2001 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (1)

Vendor Product Version
microsoft windows_nt terminal_server

GitHub Security Advisory GHSA-c8q2-5c9q-67pp

Buffer overflow in RegAPI.DLL used by Windows NT 4.0 Terminal Server allows remote attackers to...

Risk Scores

CVSS Score 7.5 / 10
EPSS Score 16.06%

Top 3% most likely to be exploited

Threat Score 34.8 / 100

Data Sources

NVD EPSS GitHub