CVE-2000-0662

The CVE-2000-0662 entry describes a vulnerability in Internet Explorer 5.x and Microsoft Outlook where remote attackers can read arbitrary files by redirecting the contents of an IFRAME via the DHTML Edit Control (DHTMLED). The root cause is tied to the DHTMLED component handling dynamic HTML/IFR...

CVE-2000-0570

Technical details for CVE-2000-0570 are not publicly available in the provided documents; monitor for updates.

CVE-2000-0581

The affected component is Windows 2000 Telnet Server. The vulnerability arises when the Telnet Server processes a continuous stream of binary zeros from a remote attacker, which leads to a denial-of-service and causes the server to crash. There are no additional details on affected subcomponents,...

CVE-2000-0741

CVE-2000-0741 refers to a format-string vulnerability in the NAI Net Tools PKI Server’s web server component (strong.exe), version 1.0 before HotFix 3. The issue occurs when user-supplied data is passed to the server’s logging routines via a URL (notably with a .XUDA extension), enabling remote c...

CVE-2001-0504

Vulnerability in authentication process for SMTP service in Microsoft Windows 2000 allows remote attackers to use incorrect credentials to gain privileges and conduct activities such as mail relaying...

CVE-2000-1200

CVE-2000-1200 affects Windows NT where remote attackers can enumerate domain users by obtaining the domain SID with the LsaQueryInformationPolicy policy function through a null session, then using that SID to list users. Connected findings consolidate that attackers can enumerate the host/local u...

CVE-2000-0753

CVE-2000-0753 affects the Microsoft Outlook mail client. The vulnerability involves a winmail.dat attachment containing an RTF file that reveals the physical path of the sender’s machine. Root cause: information leakage via a path in the attachment. Impact: disclosure of local machine path; no br...

CVE-2000-1190

The CVE-2000-1190 entry concerns the imwheel-solo component of the imwheel package. It describes a local-privilege issue where a symlink attack on the user’s .imwheelrc file allows a local user to modify arbitrary files. The description specifies the vulnerability type (symlink attack) and that e...

CVE-2001-0547

CVE-2001-0547 describes a memory leak in the proxy service of Microsoft Internet Security and Acceleration (ISA) Server 2000 that allows local attackers to cause a denial of service through resource exhaustion. The affected product is ISA Server 2000 (proxy service component); the underlying caus...

CVE-2001-0666

Outlook Web Access (OWA) in Microsoft Exchange 2000 is affected. An authenticated user can trigger a denial of service (CPU consumption) by sending a malformed OWA request for a deeply nested folder in the user’s mailbox, exploiting a vulnerability in OWA request handling. Affected component: OWA...

CVE-2001-0628

Microsoft Word 2000 does not check AutoRecovery .asd files for macros, which allows a local attacker to execute arbitrary macros with the user ID of the Word user...

CVE-2001-0879

CVE-2001-0879 describes a format-string vulnerability in the C runtime functions used by Microsoft SQL Server 7.0 and 2000. The underlying issue is a format string handling flaw in the C runtime, which can allow an attacker to trigger a denial of service. The available connected documents confirm...

CVE-2001-0860

The CVE-2001-0860 entry documents a vulnerability in Terminal Services Manager MMC on Windows 2000 and Windows XP where the service trusts the Client Address (IP) provided by the client instead of deriving it from packet headers. This enables IP address spoofing (e.g., via NAT). Root cause: the t...

CVE-2000-0891

The CVE-2000-0891 issue concerns Lotus Notes prior to 5.02 where default ECLs were permissive enough to allow arbitrary code execution when a user opens an email containing a malicious program attached to the message. The underlying cause is a misconfigured ECL that lets an attacker attach a prog...

CVE-2000-0859

The CVE-2000-0859 entry describes a DoS in the NTMail web configuration server for NTMail V5 and V6 caused by remote attackers sending a sequence of partial HTTP requests. The impact is denial of service (availability) with no confidentiality or integrity impact stated, and the CVSS vector indica...

CVE-2000-0662

Internet Explorer 5.x and Microsoft Outlook allows remote attackers to read arbitrary files by redirecting the contents of an IFRAME using the DHTML Edit Control DHTMLED...

CVE-2000-1111

Telnet Service for Windows 2000 Professional does not properly terminate incomplete connection attempts, which allows remote attackers to cause a denial of service by connecting to the server and not providing any input...

CVE-2000-0006

strace allows local users to read arbitrary files via memory mapped file names...

CVE-2000-0570

FirstClass Internet Services server 5.770, and other versions before 6.1, allows remote attackers to cause a denial of service by sending an email with a long To: mail header...

CVE-2000-0796

CVE-2000-0796 is a local privilege-escalation vulnerability in IRIX dmplay affecting IRIX 6.2 and 6.3, caused by a buffer overflow triggered by a long command-line option. The connected documents corroborate this description, listing root-privilege gain as the impact. No exploit code or in-the-wi...