How severe is CVE-2000-0091?

CVE-2000-0091 has a CVSS 2.0 base score of 10.0, rated critical severity.

Is CVE-2000-0091 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 13% (96th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2000-0091?

CVE-2000-0091 primarily affects Inter7 Vpopmail. In total, 10 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2000-0091?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.

When was CVE-2000-0091 published?

CVE-2000-0091 was published on 2000-01-21 and last updated on 2026-06-16.

CVE-2000-0091

CVE-2000-0091 is a critical-severity vulnerability in Inter7 Vpopmail with a CVSS 2.0 base score of 10.0. Its EPSS exploit-prediction score of 13% places it in the 96th percentile, indicating an elevated likelihood of exploitation.

Key facts

Severity: Critical (CVSS 2.0 base score 10.0)
EPSS exploit prediction: 13% (96th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Inter7 Vpopmail
Published: 2000-01-21
Last modified: 2026-06-16

Description

Buffer overflow in vchkpw/vpopmail POP authentication package allows remote attackers to gain root privileges via a long username or password.

Frequently asked questions

What is CVE-2000-0091?: Buffer overflow in vchkpw/vpopmail POP authentication package allows remote attackers to gain root privileges via a long username or password.
How severe is CVE-2000-0091?: CVE-2000-0091 has a CVSS 2.0 base score of 10.0, rated critical severity.
Is CVE-2000-0091 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 13% (96th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2000-0091?: CVE-2000-0091 primarily affects Inter7 Vpopmail. In total, 10 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2000-0091?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
When was CVE-2000-0091 published?: CVE-2000-0091 was published on 2000-01-21 and last updated on 2026-06-16.

References

Affected products (10)

cpe:2.3:a:inter7:vpopmail:vchkpw_3.4.1:*:*:*:*:*:*:*
cpe:2.3:a:inter7:vpopmail:vchkpw_3.4.2:*:*:*:*:*:*:*
cpe:2.3:a:inter7:vpopmail:vchkpw_3.4.3:*:*:*:*:*:*:*
cpe:2.3:a:inter7:vpopmail:vchkpw_3.4.4:*:*:*:*:*:*:*
cpe:2.3:a:inter7:vpopmail:vchkpw_3.4.5:*:*:*:*:*:*:*
cpe:2.3:a:inter7:vpopmail:vchkpw_3.4.6:*:*:*:*:*:*:*
cpe:2.3:a:inter7:vpopmail:vchkpw_3.4.7:*:*:*:*:*:*:*
cpe:2.3:a:inter7:vpopmail:vchkpw_3.4.8:*:*:*:*:*:*:*
cpe:2.3:a:inter7:vpopmail:vchkpw_3.4.9:*:*:*:*:*:*:*
cpe:2.3:a:inter7:vpopmail:vchkpw_3.4.11:*:*:*:*:*:*:*

More vulnerabilities in Inter7 Vpopmail

CVE-2001-0990 — Medium (CVSS 4.6): Inter7 vpopmail 4.10.35 and earlier, when using the MySQL module, compiles authentication information in cleartext into…

All CVEs affecting Inter7 Vpopmail →