CVE-2000-0488

Buffer overflow in ITHouse mail server 1.04 allows remote attackers to execute arbitrary commands via a long RCPT TO mail command...

CVE-2000-0980

NMPI Name Management Protocol on IPX listener in Microsoft NWLink does not properly filter packets from a broadcast address, which allows remote attackers to cause a broadcast storm and flood the network...

CVE-2000-0992

Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. dot dot attack...

CVE-2000-0946

The CVE-2000-0946 entry concerns Compaq Easy Access Keyboard software 1.3, where the keyboard’s custom buttons are not properly disabled when the screen is locked. This could allow an attacker with local access to gain privileges or execute programs without authorization. The connected records co...

CVE-2000-0984

The HTTP server in Cisco IOS 12.0 through 12.1 allows local users to cause a denial of service crash and reload via a URL containing a "?/" string...

CVE-2000-0969

Format string vulnerability in Half Life dedicated server build 3104 and earlier allows remote attackers to execute arbitrary commands by injecting format strings into the changelevel command, via the system console or rcon...

CVE-2000-1006

Microsoft Exchange Server 5.5 does not properly handle a MIME header with a blank charset specified, which allows remote attackers to cause a denial of service via a charset="" command, aka the "Malformed MIME Header" vulnerability...

CVE-2000-0995

Format string vulnerability in OpenBSD yppasswd program and possibly other BSD-based operating systems allows attackers to gain root privileges a malformed name...

CVE-2000-0930

Pegasus Mail 3.12 allows remote attackers to read arbitrary files via an embedded URL that calls the mailto: protocol with a -F switch...

CVE-2000-0834

The Windows 2000 telnet client attempts to perform NTLM authentication by default, which allows remote attackers to capture and replay the NTLM challenge/response via a telnet:// URL that points to the malicious server, aka the "Windows 2000 Telnet Client NTLM Authentication" vulnerability...

CVE-2000-0965

The NSAPI plugins for TGA and the Java Servlet proxy in HP-UX VVOS 10.24 and 11.04 allows an attacker to cause a denial of service high CPU utilization...

CVE-2000-0283

The vulnerability CVE-2000-0283 affects IRIX Performance Copilot (pmcd daemon). In default installations, remote attackers could access sensitive system information via pmcd, leading to partial confidentiality impact. The issue is tied to the service exposing data; the documented remediation is t...

CVE-2000-0738

The CVE-2000-0738 entry maps to a concrete issue in WebShield SMTP 4.5 where a From: header ending in a dot triggers the product to repeatedly send copies of the same email, causing a denial of service via email flood. The vulnerability is rooted in the mail-handling logic that mishandles such he...

CVE-2000-1139

The CVE-2000-1139 entry concerns Microsoft Exchange 2000 prior to Rev. A, where installation creates a user account with a known password. This enables potential privilege elevation (privileges granted to the created account) as described in the description. The NVD metrics assign a CVSSv2 base s...

CVE-2000-1135

CVE-2000-1135 describes a local privilege issue in the fshd (fsh daemon) on Debian GNU/Linux. The vulnerability allows a local user to overwrite files belonging to other users via a symbolic link (symlink) attack. The impact is partial confidentiality, integrity, and availability due to the abili...

CVE-2000-0948

CVE-2000-0948 corresponds to a local vulnerability in GnoRPM prior to version 0.95, where insecure handling of /tmp allows a local user to modify arbitrary files via a symlink attack. The Mandrake MDKSA-2000:055 advisory explicitly states that versions before 0.95 used files in /tmp insecurely an...

CVE-2000-1044

CVE-2000-1044 concerns a format-string vulnerability in ypbind-mt on SuSE Linux (notably SuSE-6.2) that could allow an attacker to gain root privileges. The vulnerability arises in the handling of format strings in the affected component; no exploitation details are provided in the available docu...

CVE-2000-0968

Buffer overflow in Half Life dedicated server before build 3104 allows remote attackers to execute arbitrary commands via a long rcon command...

CVE-2000-1018

shred 1.0 file wiping utility does not properly open a file for overwriting or flush its buffers, which prevents shred from properly replacing the file's data and allows local users to recover the file...

CVE-2000-1142

Recourse ManTrap 1.6 generates an error when an attacker cd's to /proc/self/cwd and executes the pwd command, which allows attackers to determine that they are in a honeypot system...