CVE-2000-0120

The CVE-2000-0120 entry concerns Allaire Spectra 1.0, where the Remote Access Service invoke.cfm template allows bypassing authentication via the bAuthenticated parameter. This constitutes a vulnerability in the authentication logic of the template, enabling partial disclosure/modification risks ...

CVE-2000-1109

CVE-2000-1109 affects Midnight Commander (mc) versions up to 4.x, specifically 4.5.51 and earlier. The issue arises when mc processes malformed directory names during directory opening, allowing a local user to gain privileges by creating directories that contain special characters followed by co...

CVE-2000-1123

CVE-2000-1123 involves a buffer overflow in the pioout command on IBM AIX 4.3.x and earlier. The root cause is a vulnerable buffer handling in pioout, allowing local users to execute arbitrary commands with privileges on affected systems. Documents confirm the affected product as IBM AIX 4.3.x an...

CVE-2000-1165

Balabit syslog-ng is affected by CVE-2000-1165 due to a parsing error in messages that lack a closing > in the priority specifier, allowing remote attackers to cause an application crash (DoS). The available records identify the affected software as Balabit syslog-ng and describe the issue as ...

CVE-2000-0803

GNU Groff uses the current working directory to find a device description file, which allows a local user to gain additional privileges by including a malicious postpro directive in the description file, which is executed when another user runs groff...

CVE-2000-0348

The vulnerability CVE-2000-0348 affects the Sendmail configuration file sendmail.cf in SCO UnixWare 7.1.0 and earlier. The issue allows an attacker to gain root privileges by exploiting the misconfiguration in sendmail.cf. The connected documents do not provide additional exploit details, affecte...

CVE-2000-1075

The provided data confirms CVE-2000-1075 affects iPlanet products: Certificate Management System 4.2 and Directory Server 4.12. The vulnerability is a directory traversal in the Agent, End Entity, or Administrator services that allows remote attackers to read arbitrary files on the server by send...

CVE-2000-1174

CVE-2000-1174 affects Ethereal (now Wireshark) up to version 0.8.13 and earlier, where multiple buffer overflows in the AFS ACL parser allow remote attackers to execute arbitrary commands by sending a crafted packet with a long username. The flaw is in the parser’s handling of AFS ACL data, enabl...

CVE-2000-0720

The vulnerability CVE-2000-0720 affects GWScripts News Publisher (news.cgi and the new.cgi author-adding path). The root cause is improper authentication on author-adding requests, enabling a remote attacker to add new authors by posting to new.cgi with an addAuthor parameter while setting the Re...

CVE-2000-0577

Netscape Professional Services FTP Server 1.3.6 allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2000-0818

The CVE-2000-0818 issue affects Oracle Listener (tnslsnr) in default installations of versions 7.3.4, 8.0.6, and 8.1.6, allowing an attacker to log data to arbitrary files and execute commands through SET TRC_FILE or SET LOG_FILE. The provided documents indicate the vulnerability enables modifica...

CVE-2000-0351

The vulnerability CVE-2000-0351 affects SCO UnixWare 7.1.0 packaging commands that grant insecure privileges, enabling local users to add or remove software packages. Connected sources (NVD, CVE List, CVE record, EUVD) corroborate that this is a local-privilege issue impacting the packaging subsy...

MS Windows 2000 sp1/sp2 isapi .printer Extension Overflow Exploit

Exploit for unknown platform in category remote exploits ================================================================= MS Windows 2000 sp1/sp2 isapi .printer Extension Overflow Exploit ================================================================= / iishack 2000 - eEye Digital Security -...

Microsoft Windows Server 2000 SP1/SP2 - isapi .printer Extension Overflow (1)

/ iishack 2000 - eEye Digital Security - 2001 This affects all unpatched windows 2000 machines with the .printer isapi filter loaded. This is purely proof of concept. Quick rundown of the exploit: Eip overruns at position 260 i have 19 bytes of code to jump back to the beginning of the buffer. an...

Microsoft Windows Server 2000 SP1SP2 - isapi .printer Extension Overflow (1)

Microsoft Windows Server 2000 SP1SP2 - isapi .printer Extension Overflow 1 / iishack 2000 - eEye Digital Security - 2001 This affects all unpatched windows 2000 machines with the .printer isapi filter loaded. This is purely proof of concept. Quick rundown of the exploit: Eip overruns at position...

Updated Information: Internet Printing ISAPI Buffer Overrun

-----BEGIN PGP SIGNED MESSAGE----- Hi All - Russ forwarded several queries to us regarding Microsoft Security Bulletin MS01-023 http://www.microsoft.com/technet/security/bulletin/MS01-023.asp. We've updated the bulletin, but I thought it might be helpful to pass the answers back to the broader...

CVE-2001-0324

Windows 98 and Windows 2000 Java clients allow remote attackers to cause a denial of service via a Java applet that opens a large number of UDP sockets, which prevents the host from establishing any additional UDP connections, and possibly causes a crash...

CVE-2001-0147

Buffer overflow in Windows 2000 event viewer snap-in allows attackers to execute arbitrary commands via a malformed field that is improperly handled during the detailed view of event records...

Windows 2000 IIS 5.0 Remote buffer overflow vulnerability (Remote SYSTEM Level Access)

Windows 2000 IIS 5.0 Remote buffer overflow vulnerability Remote SYSTEM Level Access Release Date: May 01, 2001 Severity: High Remote SYSTEM level code execution Systems Affected: Microsoft Windows 2000 Internet Information Services 5.0 Microsoft Windows 2000 Internet Information Services 5.0 +...

g6-dos.txt

The FTP server G6 v 2.00 freezes if told to create a directory "COM1", "COM2", "COM3" or "COM4" MKD COM1 The version tested was running on win2k. The upload was allowed into /upload bug submitter: GkOS -- Best regards, Konstantin mailto:[email protected] aka GkOS...