CVE-2000-1197
2.1 · LOWOverview
CVE-2000-1197 is a low-severity vulnerability affecting university_of_washington imap. It was published on August 31, 2001 and has a CVSS 2.0 base score of 2.1 (LOW).
This vulnerability has a CVSS 2.0 base score of 2.1, rated LOW. It requires local or adjacent network access to exploit. No authentication or special privileges are required for exploitation.
Technical Description
POP2 or POP3 server (pop3d) in imap-uw IMAP package on FreeBSD and other operating systems creates lock files with predictable names, which allows local users to cause a denial of service (lack of mail access) for other users by creating lock files for other mail boxes.
Remediation
Check the references section for vendor advisories and patches from university_of_washington. Update imap to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.
Affected Products
| Vendor | Product | Versions | Status |
|---|
References
Frequently Asked Questions
What is CVE-2000-1197?
CVE-2000-1197 is a low-severity vulnerability affecting university_of_washington imap. It was published on August 31, 2001 and has a CVSS 2.0 base score of 2.1 (LOW).
How severe is CVE-2000-1197?
This vulnerability has a CVSS 2.0 base score of 2.1, rated LOW. It requires local or adjacent network access to exploit. No authentication or special privileges are required for exploitation.
How do I fix or remediate CVE-2000-1197?
Check the references section for vendor advisories and patches from university_of_washington. Update imap to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.
How can CyberStrike help with CVE-2000-1197?
CyberStrike's AI-powered security agents can automatically detect CVE-2000-1197 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.
How CyberStrike Helps
AI agents map your attack surface to find vulnerabilities like this one.
Automated penetration testing that runs continuously, not just quarterly.
AI-driven PR review catches vulnerable dependencies before they ship.
Browser-based exploitation validates findings with real proof-of-concept.
Related LOW CVEs from 2000
View all →Netscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local use
SGI MIPSPro compilers C, C++, F77 and F90 generate temporary files in /tmp with predictable file nam
IRIX crontab creates temporary files with predictable file names and with the umask of the user, whi
inpview in InPerson in SGI IRIX 5.3 through IRIX 6.5.10 allows local users to gain privileges via a
VMWare 1.1.2 allows local users to cause a denial of service via a symlink attack.
The Recycle Bin utility in Windows NT and Windows 2000 allows local users to read or modify files by
Buffer overflow in innd 2.2.2 allows remote attackers to execute arbitrary commands via a cancel req
The make-temp-name Lisp function in Emacs 20 creates temporary files with predictable names, which a
The Netopia R9100 router does not prevent authenticated users from modifying SNMP tables, even if th
The Protected Store in Windows 2000 does not properly select the strongest encryption when available
Vulnerability in gpm in Caldera Linux allows local users to delete arbitrary files or conduct a deni
The BAIR program does not properly restrict access to the Internet Explorer Internet options menu, w