CVE-2000-1164

WinVNC installs the WinVNC3 registry key with permissions that give Special Access read and modify to the Everybody group, which allows users to read and modify sensitive information such as passwords and gain access to the system...

CVE-2000-0351

Some packaging commands in SCO UnixWare 7.1.0 have insecure privileges, which allows local users to add or remove software packages...

CVE-2000-0309

The i386 trace-trap handling in OpenBSD 2.4 with DDB enabled allows a local user to cause a denial of service...

CVE-2001-0015

Network Dynamic Data Exchange DDE in Windows 2000 allows local users to gain SYSTEM privileges via a "WMCOPYDATA" message to an invisible window that is running with the privileges of the WINLOGON process...

CVE-2000-1170

The CVE-2000-1170 entry concerns the Netsnap webcam HTTP server prior to version 1.2.9, which is vulnerable to a buffer overflow triggered by a long GET request. This could allow remote attackers to execute arbitrary commands. The vulnerability is exploitable over the network with no authenticati...

CVE-2000-0650

The CVE-2000-0650 entry concerns VirusScan 4.5 and NetShield 4.5. Insecure permissions on the registry key identifying the AutoUpgrade directory could let a local user replace SETUP.EXE with a Trojan Horse to execute arbitrary commands. The report does not specify a patch or remediation, affected...

CVE-2000-0541

The CVE-2000-0541 entry concerns Panda Antivirus console on port 2001, where local users can run arbitrary commands without authentication via CMD. The affected component is the console/service listening on port 2001; the root cause is improper authentication allowing local command execution. The...

CVE-2000-0694

CVE-2000-0694 concerns the pgxconfig component of the Raptor GFX configuration tool. The vulnerability arises from a symlink attack that enables local users to gain privileges. The available documents identify the affected software as the Raptor GFX configuration tool’s pgxconfig and describe a l...

CVE-2000-1121

IBM AIX enq buffer overflow (CVE-2000-1121) in the -M argument of the enq command could allow a local user to gain root privileges. The vendor has published patches (APARs IY08143 for AIX 4.3 and IY08287 for AIX 4.2/4.3) to fix this issue; the vulnerability is associated with IBM AIX versions 4.3...

CVE-2001-0005

Microsoft PowerPoint 2000 is affected by a buffer overflow in the file loader’s parsing mechanism, allowing arbitrary code execution when a user opens a malicious PowerPoint file or views a malicious web page. The root cause is a parsing overflow in the loader that can be triggered by crafted inp...

CVE-2000-1171

The CVE-2000-1171 issue affects CGIForum 1.0’s cgiforum.pl (thesection parameter) where insufficient input validation allows directory traversal. An attacker can craft a URL (e.g., ?thesection=../../../../etc/passwd) to access files on the web server, with the accessible scope limited by the web ...

CVE-2000-1108

CVE-2000-1108 affects Midnight Commander (mc) cons.saver for 4.x and earlier. Root cause: cons.saver does not properly verify if the output descriptor is a TTY and mishandles the argument as a TTY, allowing a local user to cause file corruption by abusing a symlink to the target file when mc is i...

CVE-2000-0726

CVE-2000-0726 affects Stalkerlab Mailers CGIMail.exe (1.1.2). The CGI program allows remote attackers to read arbitrary files by specifying the target file in the hidden $Attach$ form variable, resulting in information disclosure. Connected sources (OpenVAS/Nessus plugins and CVE/NVD records) cor...

CVE-2000-0856

Consolidated evidence shows SunFTP Buffer Overflow (CVE-2000-0856) affecting SunFTP build 9(1). The vulnerability arises from improper handling of long GET requests, enabling a remote attacker to cause a denial of service or potentially execute arbitrary commands by sending more than about 2100 c...

CVE-2000-0309

Public technical details about CVE-2000-0309 are not provided in the connected documents. The initial entry notes a local DoS in OpenBSD 2.4 with DDB, but no further technical specifics or fixes are included here. Monitor for updates.

CVE-2000-0306

CVE-2000-0306 describes a buffer overflow in SCO OpenServer’s calserver that allows remote attackers to gain root privileges by sending a long message. The vulnerability is caused by insufficient bounds checking in calserver; exploitation would require crafting a long message sent to the service....

CVE-2000-0306

Buffer overflow in calserver in SCO OpenServer allows remote attackers to gain root access via a long message...

CVE-2000-1124

The CVE-2000-1124 entry describes a local privilege-escalation flaw in IBM AIX 4.3.x: a buffer overflow in the piobe command caused by long environmental variables. The affected component is the piobe command on IBM AIX 4.3.x; the underlying issue is a buffer overflow allowing local users to gain...

CVE-2000-0890

CVE-2000-0890 is a race-condition vulnerability affecting the FreeBSD periodic script (and possibly other systems) that allows a local user to overwrite arbitrary files via symlink manipulation of temporary files named like /tmp/periodic.*_$PID. The issue arises because periodic creates predictab...

CVE-2000-0504

CVE-2000-0504 affects the XFree86 suite, specifically the libICE component. The issue arises when processing an unvalidated, large value in the SKIP_STRING macro, allowing remote attackers to cause a denial of service. The available documents identify the vulnerable software as libICE in XFree86 ...