critical10.0Public exploit code
CVE-2000-0109
The mcsp Client Site Processor system (MultiCSP) in Standard and Poor's ComStock is installed with several accounts that have no passwords or easily guessable …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Standard & Poors ComStock 4.2.4 - Command Execution2000-03-24 · local · unix · Verified
Impact
The mcsp Client Site Processor system (MultiCSP) in Standard and Poor's ComStock is installed with several accounts that have no passwords or easily guessable default passwords.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Comstock | Multicsp | Version 4.2 |