CVE-2000-1149
highBuffer overflow in RegAPI.DLL used by Windows NT 4.0 Terminal Server allows remote attackers to execute arbitrary commands via a long username, aka the "Termin…
Vendor / product: Microsoft — windows nt
Buffer overflow in RegAPI.DLL used by Windows NT 4.0 Terminal Server allows remote attackers to execute arbitrary commands via a long username, aka the "Terminal Server Login Buffer Overflow" vulnerability.
CVSS
7.5
7.5 (CVSS v2.0)
AV:N/AC:L/Au:N/C:P/I:P/A:P Severity source: NVD CVSS v2.0 (nvd@nist.gov)
Timeline (UTC)
Published: 2001-01-09 05:00
Modified: 2026-11-12 00:10
NVD status: Modified
Last synced 1 day ago
Verified against the source API 2026-11-12 00:12 UTC
Exploitation
Not listed in CISA KEV (as of last catalog sync)
Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).
Affected products
microsoft / windows_nt terminal_server
Weakness classification (CWE)
NVD-CWE-Other
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
Vendor advisory: http://www.securityfocus.com/archive/1/143991
Vendor advisory: http://www.securityfocus.com/bid/1924
Vendor advisory: http://www.securityfocus.com/archive/1/143991
Vendor advisory: http://www.securityfocus.com/bid/1924
Patch / mitigation: http://www.securityfocus.com/archive/1/143991
Patch / mitigation: http://www.securityfocus.com/bid/1924
Patch / mitigation: http://www.securityfocus.com/archive/1/143991
Patch / mitigation: http://www.securityfocus.com/bid/1924
References
- http://www.securityfocus.com/archive/1/143991 cve@mitre.org
- http://www.securityfocus.com/bid/1924 cve@mitre.org
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-087 cve@mitre.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5489 cve@mitre.org
- http://www.securityfocus.com/archive/1/143991 af854a3a-2127-422b-91ae-364da2661108
- http://www.securityfocus.com/bid/1924 af854a3a-2127-422b-91ae-364da2661108
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-087 af854a3a-2127-422b-91ae-364da2661108
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5489 af854a3a-2127-422b-91ae-364da2661108
Data sources
NVD CVE API 2.0 — fetched 2026-11-12 00:12 UTC · record ↗