How severe is CVE-2000-0845?

CVE-2000-0845 has a CVSS 2.0 base score of 6.4, rated medium severity.

Is CVE-2000-0845 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (67th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2000-0845?

CVE-2000-0845 affects Digital Unix. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2000-0845?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2000-0845 published?

CVE-2000-0845 was published on 2000-11-14 and last updated on 2026-06-16.

CVE-2000-0845

CVE-2000-0845 is a medium-severity vulnerability in Digital Unix with a CVSS 2.0 base score of 6.4. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Medium (CVSS 2.0 base score 6.4)
EPSS exploit prediction: 1% (67th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Digital Unix
Published: 2000-11-14
Last modified: 2026-06-16

Description

kdebug daemon (kdebugd) in Digital Unix 4.0F allows remote attackers to read arbitrary files by specifying the full file name in the initialization packet.

Frequently asked questions

What is CVE-2000-0845?: kdebug daemon (kdebugd) in Digital Unix 4.0F allows remote attackers to read arbitrary files by specifying the full file name in the initialization packet.
How severe is CVE-2000-0845?: CVE-2000-0845 has a CVSS 2.0 base score of 6.4, rated medium severity.
Is CVE-2000-0845 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (67th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2000-0845?: CVE-2000-0845 affects Digital Unix. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2000-0845?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2000-0845 published?: CVE-2000-0845 was published on 2000-11-14 and last updated on 2026-06-16.

References

http://archives.neohapsis.com/archives/bugtraq/2000-09/0204.html

Affected products (1)

cpe:2.3:o:digital:unix:4.0f:*:*:*:*:*:*:*

More vulnerabilities in Digital Unix

CVE-2001-0134 — Critical (CVSS 10.0): Buffer overflow in cpqlogin.htm in web-enabled agents for various Compaq management software products such as Insight…
CVE-1999-0073 — Critical (CVSS 10.0): Telnet allows a remote client to specify environment variables including LD_LIBRARY_PATH, allowing an attacker to…
CVE-1999-0687 — High (CVSS 7.5): The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to execute commands.
CVE-2001-0369 — High (CVSS 7.2): Buffer overflow in lpsched on DGUX version R4.20MU06 and MU02 allows a local attacker to obtain root access via a long…
CVE-1999-0691 — High (CVSS 7.2): Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a…
CVE-1999-0713 — High (CVSS 7.2): The dtlogin program in Compaq Tru64 UNIX allows local users to gain root privileges.

All CVEs affecting Digital Unix →