CVE-2000-0527

MailStudio 2000 2.0 and earlier - Remote Command Execution via userreg.cgi Shell Metacharacters

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2000-0527. PoCs published by fygrave.

AI-analyzed exploit summary This exploit targets CVE-2000-0527 in MailStudio 2000, leveraging a buffer overflow in userreg.cgi to execute arbitrary commands as root. It includes shellcode and stack manipulation to achieve remote code execution.

Description

userreg.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters.

Exploits (1)

exploitdb WORKING POC VERIFIED

by fygrave · cremotecgi

https://www.exploit-db.com/exploits/20007

View Code ZIP pw:eip

This exploit targets CVE-2000-0527 in MailStudio 2000, leveraging a buffer overflow in userreg.cgi to execute arbitrary commands as root. It includes shellcode and stack manipulation to achieve remote code execution.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: MailStudio 2000

No auth needed

Prerequisites: Network access to the target server · MailStudio 2000 with vulnerable userreg.cgi

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1203 - Exploitation for Client Execution

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2

Core References

Third Party Advisory mailing-list x_refsource_bugtraq

http://archives.neohapsis.com/archives/bugtraq/2000-06/0081.html

Vendor Advisory vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/1335

Scores

EPSS 0.0992

EPSS Percentile 95.0%

Details

Status published

Products (1)

3r_soft/mailstudio_2000 2.0

Published Jun 09, 2000

Tracked Since Feb 18, 2026