CVE-2000-0091

CVE-2000-0091 describes a critical buffer overflow vulnerability in the vchkpw/vpopmail POP authentication package, specifically affecting inter7 vpopmail. This flaw allows unauthenticated remote attackers to achieve root privileges by supplying an excessively long username or password during authentication. With a CVSS score of 10.0 (HIGH), the vulnerability is easily exploitable over the network with no authentication required, leading to complete compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog or showing active exploitation, exploit code for a local buffer overflow variant is available on ExploitDB, and there is no significant community discussion or media coverage.