CVE-2000-0921

CVE-2000-0921 describes a directory traversal in Hassan Consulting’s shop.cgi shopping cart, allowing remote attackers to read arbitrary files by using a .. payload in the page parameter. The issue is due to improper handling of relative paths, enabling access to sensitive files and potentially e...

CVE-2000-0925

The CVE-2000-0925 entry concerns SmartWin CyberOffice Shopping Cart 2 (CyberShop). The available documents state that the default installation creates a _private directory with world-readable permissions, which allows remote attackers to obtain sensitive information. No further technical specific...

CVE-2000-0935

CVE-2000-0935 affects Samba 2.0.7: the SWAT (Samba Web Administration Tool) CGI log file is vulnerable to a symlink attack that lets local users overwrite arbitrary files. This is a local-privilege context with complete impact on confidentiality and integrity as indicated by the CVSS metrics. Sup...

CVE-2000-0936

Samba SWAT in Samba 2.0.7 exposes the cgi.log file with world-readable permissions, enabling local users to read sensitive data (e.g., user names and passwords). Affected component: Samba Web Administration Tool (SWAT). Root cause: SWAT’s logging file is installed world-readable, leaking credenti...

CVE-2000-0944

The CVE-2000-0944 issue affects CGI Script Center News Update 1.1. The vulnerability is in the password change flow where the original news administration password is not properly validated, enabling remote attackers to modify the password without knowing the original. Impact is unauthenticated r...

CVE-2000-0949

CVE-2000-0949 describes a heap overflow in the savestr function of LBNL traceroute 1.4a5 and earlier. A local user can execute arbitrary commands via the -g option. The connected Mandrake advisory notes the traceroute program is setuid root and that a segfault/overflow could potentially lead to r...

CVE-2000-0951

The CVE-2000-0951 issue affects Microsoft IIS (likely IIS 5.0) where Index Server is enabled and the Index property misconfigured, allowing remote users to list web root directories via a WebDAV search. This results in information disclosure about remote directories and HTML files, increasing an ...

CVE-2000-0989

The CVE-2000-0989 entry describes a buffer overflow in Intel InBusiness eMail Station 1.04.87 POP service. The flaw allows a remote attacker to trigger a denial of service and potentially execute commands by sending a long username. The provided sources confirm the affected component and the basi...

CVE-2000-1005

The CVE-2000-1005 entry concerns directory traversal in eXtropia WebStore CGI scripts (html_web_store.cgi and web_store.cgi). An attacker can read arbitrary files by supplying a .. (dot dot) path in the page parameter, enabling remote file disclosure. The vulnerability is evidenced by multiple so...

CVE-2000-1026

CVE-2000-1026 involves multiple buffer overflows in LBNL tcpdump that allow remote attackers to execute arbitrary commands. Affected software is tcpdump (LBNL). The vulnerability is triggered by crafting inputs over the network and, per CVSS, has high impact with full confidentiality, integrity, ...

CVE-2000-1058

The CVE-2000-1058 issue affects HP OpenView Network Node Manager (NNM) 6.1 and earlier, where the OverView5 CGI program contains a buffer overflow vulnerability. The flaw in the Java SNMP MIB Browser Object ID parsing can be exploited remotely via the SNMP service (snmp.exe), potentially causing ...

CVE-2000-1074

CVE-2000-1074 affects the csstart program in iCal 2.1 Patch 2. It uses relative pathnames to install libsocket and libnsl, enabling the icsuser account to gain root privileges by placing a Trojan Horse library in the current or parent directory. The available documents state the vulnerability and...

CVE-2000-1095

CVE-2000-1095 affects modprobe in the modutils 2.3.x package. The vulnerability arises because modprobe uses popen() to invoke the echo program with user-supplied input, allowing unescaped shell metacharacters to be processed via /bin/sh when run through kmod-triggered paths. This can enable a lo...

CVE-2000-1071

Technical details (affected product, root cause, impact, and fix) are not publicly available in the provided documents. Monitor official CVE records and vendor advisories for updates.

CVE-2000-1184

Technical details are not publicly available in the provided documents for CVE-2000-1184; monitor for updates.

CVE-2000-0968

The CVE-2000-0968 entry concerns the Half-Life dedicated server prior to build 3104, where a buffer overflow in handling a long rcon command allows remote execution of arbitrary commands. Evidence from NVD/CVE records confirms a network-based vulnerability with complete confidentiality, integrity...

CVE-2000-0913

The CVE-2000-0913 issue affects the Apache web server module mod_rewrite. It enables a remote attacker to read arbitrary files when a RewriteRule directive expands to a filename containing a regular expression, as described for Apache 1.3.12 and earlier. Connected sources corroborate that this is...

CVE-2000-0900

Directory traversal vulnerability in ssi CGI program in thttpd 2.19 and earlier allows remote attackers to read arbitrary files via a "%2e%2e" string, a variation of the .. dot dot attack...

CVE-2000-1032

CVE-2000-1032 affects Check Point Firewall-1 4.0 and earlier. The client authentication interface returns distinct error messages for invalid usernames versus invalid passwords, enabling remote attackers to enumerate valid usernames on the firewall. The existing records do not provide concrete de...

CVE-2000-1000

Summary: CVE-2000-1000 is a format-string vulnerability in AOL Instant Messenger (AIM) 4.1 and earlier. The issue arises when transferring a file whose name contains format specifiers, which can cause a denial of service and may allow arbitrary command execution. Root cause: format-string handlin...