Exploitation Summary
EIP tracks 1 public exploit for CVE-2000-0012. PoCs published by Zhodiac.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in w3-msql (CVE-2000-0012) via the Content-Length field, allowing remote code execution as the webserver user. It uses a custom shellcode to spawn an xterm on a specified display.
Description
Buffer overflow in w3-msql CGI program in miniSQL package allows remote attackers to execute commands.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Zhodiac · cremotesolaris
https://www.exploit-db.com/exploits/19696
This exploit targets a buffer overflow vulnerability in w3-msql (CVE-2000-0012) via the Content-Length field, allowing remote code execution as the webserver user. It uses a custom shellcode to spawn an xterm on a specified display.
Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target:
w3-msql (msql 2.0.4.1 - 2.0.11)
No auth needed
Prerequisites:
Network access to the target · X server access for xterm display
devstral-2 · analyzed Feb 16, 2026
Full analysis →
References (1)
Core 1
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/898
Scores
EPSS
0.0989
EPSS Percentile
95.0%
Details
Status
published
Products (1)
hughes/msql
2.0.11
Published
Dec 27, 1999
Tracked Since
Feb 18, 2026