CVE-2001-0663

The CVE-2001-0663 entry concerns Terminal Server in Windows NT and Windows 2000. Affected component: Terminal Server; vulnerability exploited by a sequence of invalid Remote Desktop Protocol (RDP) packets to cause a denial of service. Root cause: handling of invalid/malformed RDP packets leads to...

CVE-2000-0180

The CVE-2000-0180 issue affects the Sojourn search engine through the sojourn.cgi CGI, where a directory-traversal (.. ) flaw allows remote attackers to read arbitrary files. The vulnerability enables information disclosure by exploiting the CGI’s input handling, executing with the web server’s p...

CVE-2000-1196

Netscape PublishingXpert 2.5 before SP2 is affected by CVE-2000-1196 via PSCOErrPage.htm. The PSUser/PSCOErrPage.htm CGI mishandles the errPagePath parameter, allowing an attacker to read arbitrary files on the target system (information disclosure). CVSS info from NVD indicates network-vector, l...

CVE-2000-0007

Technical details for CVE-2000-0007 are not provided in the connected documents. The entry notes a DoS via Trend Micro PC-Cillin proxy port but lacks specifics on affected versions, root cause, mitigation, or fixes; monitor for updates.

CVE-2000-0581

Windows 2000 Telnet Server allows remote attackers to cause a denial of service by sending a continuous stream of binary zeros, which causes the server to crash...

CVE-2001-0540

Memory leak in Terminal servers in Windows NT and Windows 2000 allows remote attackers to cause a denial of service memory exhaustion via a large number of malformed Remote Desktop Protocol RDP requests to port 3389...

CVE-2000-1195

telnet daemon telnetd from the Linux netkit package before netkit-telnet-0.16 allows remote attackers to bypass authentication when telnetd is running with the -L command line option...

CVE-2000-0739

Directory traversal vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to read arbitrary files via a .. dot dot attack in an HTTPS request to the enrollment server...

CVE-2000-0615

CVE-2000-0615 : LPRng 3.6.x improperly installs lpd as setuid root, allowing local users to append lpd trace and logging messages to files. The connected documents confirm the vulnerability is a local privilege issue tied to the lpd binary running with root privileges. No explicit exploit details...

CVE-2001-0504

The CVE-2001-0504 entry affects the SMTP service in Microsoft Windows 2000. A flaw in the authentication handling could allow an intruder to bypass credentials, enabling the attacker to send mail and, in effect, relay through the vulnerable server. The underlying issue is a weakness in how the SM...

CVE-2000-0290

The CVE-2000-0290 entry concerns the Webstar HTTP server. Vulnerability: a buffer overflow in the HTTP server that is triggered by a long GET request, enabling remote attackers to cause a denial of service. Affected component: Webstar HTTP server (specific versions not provided in the documents)....

CVE-2001-0659

Buffer overflow in IrDA driver providing infrared data exchange on Windows 2000 allows attackers who are physically close to the machine to cause a denial of service reboot via a malformed IrDA packet...

CVE-2000-0699

The CVE-2000-0699 entry concerns HP-UX 10.20’s ftpd with a format-string vulnerability in the PASS command. The underlying flaw allows a remote attacker to cause a denial of service or execute arbitrary commands through crafted PASS input, potentially enabling shell access as indicated by Nessus ...

CVE-2001-0546

The CVE-2001-0546 issue affects Microsoft Internet Security and Acceleration (ISA) Server 2000, specifically the H.323 Gatekeeper Service. A memory leak is triggered by large amounts of malformed H.323 data, allowing remote attackers to exhaust memory and cause a denial of service (resource exhau...

CVE-2000-0551

The CVE-2000-0551 entry concerns Danware NetOp 6.0, whose file transfer mechanism reportedly does not require authentication. This allows remote attackers to access and modify arbitrary files, per the description. The connected documents confirm the affected product and the underlying issue (unau...

CVE-2000-0839

WinCOM LPD 1.00.90 allows remote attackers to cause a denial of service via a large number of LPD options to the LPD port 515...

CVE-2000-0006

CVE-2000-0006 affects the strace utility. The issue allows local users to read arbitrary files via memory-mapped file names. The connected records identify strace as the affected component and describe the vulnerability as a local-read exposure through mmap-based file-name handling. No explicit e...

CVE-2001-0502

The CVE-2001-0502 issue affects Windows 2000 LDAP over SSL where a function fails to properly verify permissions when the directory principal is a domain user and the data attribute is the domain password, allowing local users to modify other users’ login passwords. Affected component: LDAP over ...

CVE-2000-0838

CVE-2000-0838 affects Fastream FUR HTTP server 1.0b. The issue allows remote denial of service triggered by a long GET request. The available data specifies a network-accessible condition with a medium base score (CVSS v2.0: AV:N/AC:L/Au:N/C:N/I:N/A:P) and no information on exploited vectors, spe...

CVE-2000-0776

CVE-2000-0776 affects Mediahouse Statistics Server 5.02x. The vulnerability allows remote attackers to execute arbitrary commands via a long HTTP GET request. We have confirmed references in CVE records and OpenVAS entries describing the same issue, with the NVD CVSSv2 base score of 7.5 (Network ...