CVE-2000-0828: Buffer overflow in ddicgi.exe in Mobius DocumentDirect for the Internet 1.2 allows remote attackers to exec...

Security readout for executives and security teams

A flaw in an old Mobius DocumentDirect for the Internet 1.2 web component lets an attacker send a specially crafted request over the internet and run their own commands on the server. Because the software is more than two decades old, most organizations should no longer be running it, but any lingering deployment would be at serious risk. Exposure should be very low today. Mobius DocumentDirect for the Internet 1.2 is legacy report-distribution software from 2000; any remaining installations would typically sit on internal document-delivery portals, but an internet-facing ddicgi.exe endpoint would be directly reachable and exploitable. Low priority for most organizations because the affected product is 25 years old and rarely still deployed. However, if any Mobius DocumentDirect 1.2 instance is discovered, treat as high priority: unauthenticated remote code execution on a document-distribution server is a direct data-exposure and lateral-movement risk. Mitigation focus: Retire or replace Mobius DocumentDirect for the Internet 1.2; the product line is long end-of-life.; Consult current ASG/Rocket Mobius vendor guidance for any supported upgrade path or hotfix.; Remove ddicgi.exe from web-accessible directories if the application must temporarily remain online..

Prepared

Jul 12, 2026, 00:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.