CVE-2000-1181 describes a memory disclosure vulnerability affecting Real Networks RealServer 7 and earlier versions. Remote attackers can exploit this by accessing the /admin/includes/ URL, potentially revealing sensitive information stored in the server's memory. The vulnerability has a CVSS score of 5.0 (Medium), indicating a network-based attack with low complexity, requiring no authentication, and resulting in partial confidentiality impact. Its FAUCET Risk Score is 83/100, suggesting a notable risk despite its age. While there is no evidence of active exploitation or Metasploit/Nuclei modules, an ExploitDB entry (EDB-20406) confirms the availability of exploit code. Community discussion and media coverage for this CVE are minimal, which is typical for many older vulnerabilities.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
5.0CPE matchmatch criteria | cpe:2.3:a:realnetworks:realserver:5.0:*:*:*:*:*:*:* | ||
6.0CPE matchmatch criteria | cpe:2.3:a:realnetworks:realserver:6.0:*:*:*:*:*:*:* | ||
7.0CPE matchmatch criteria | cpe:2.3:a:realnetworks:realserver:7.0:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:P/I:N/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.