CVE-2000-0129: Microsoft Windows 95

Low severity, CVSS 2.1. EPSS: 3.8% chance of exploitation in the next 30 days.

Buffer overflow in the SHGetPathFromIDList function of the Serv-U FTP server allows attackers to cause a denial of service by performing a LIST command on a malformed .lnk file.

Affected products

• Microsoft Windows 95: any version
• Microsoft Windows 98: any version
• Microsoft Windows Nt: version 4.0 only

Published 2000-02-04. Last modified 2026-06-16.