7995 matches found
CVE-2000-1032
CVE-2000-1032 affects Check Point Firewall-1 4.0 and earlier. The client authentication interface returns distinct error messages for invalid usernames versus invalid passwords, enabling remote attackers to enumerate valid usernames on the firewall. The existing records do not provide concrete de...
CVE-2000-1000
Summary: CVE-2000-1000 is a format-string vulnerability in AOL Instant Messenger (AIM) 4.1 and earlier. The issue arises when transferring a file whose name contains format specifiers, which can cause a denial of service and may allow arbitrary command execution. Root cause: format-string handlin...
CVE-2000-1182
The CVE-2000-1182 entry involves WatchGuard Firebox II where a remote attacker can cause a denial of service by flooding the device with a large volume of FTP or SMTP requests, resulting in disabled proxy handling. The vulnerability affects Firebox II’s proxy functionality under network-traffic c...
CVE-2000-0783
Watchguard Firebox II is affected by CVE-2000-0783 where a remote attacker can cause a denial of service by sending a malformed URL to the authentication service on port 4100. The available sources (NVD, CVE list) describe the vulnerable component as the authentication service and the trigger via...
CVE-2000-0956
Affected software/impact (CVE-2000-0956): cyrus-sasl prior to 1.5.24 on Red Hat Linux 7.0 may fail to properly verify authorization for a local user, potentially allowing bypass of specified access restrictions. The underlying issue is a flawed authorization check in that version; the baseline CV...
CVE-2000-0960
The vulnerability CVE-2000-0960 affects Netscape Messaging Server 4.15p1: the POP3 server exposes user enumeration by returning different error messages for incorrect usernames versus incorrect passwords, enabling an attacker to determine valid accounts and harvest email addresses. The connected ...
CVE-2000-1187
CVE-2000-1187 involves a buffer overflow in the HTML parser of Netscape 4.75 and earlier. The vulnerability allows remote attackers to execute arbitrary commands by supplying a long password value in a form field. The available documents explicitly describe the affected component (HTML parser), t...
CVE-2000-0080
CVE-2000-0080 describes a local-file overwrite flaw in AIX techlibss caused by a symlink attack . The vulnerability allows local users to overwrite files, with a partial integrity impact and no confidentiality or availability impact, according to the CVSS metrics ( LOCAL access; LOW complexity; N...
CVE-2000-1072
iCal 2.1 Patch 2 installs many files with world-writeable permissions, which allows local users to modify the iCal configuration and execute arbitrary commands by replacing the iplncal.sh program with a Trojan horse...
CVE-2000-0915
The CVE-2000-0915 issue affects the FreeBSD finger daemon on version 4.1.1, where a remote attacker can read arbitrary files by specifying the target file name instead of a user name (e.g., finger /etc/passwd@target). The root cause is improper handling of the file-path argument by fingerd, enabl...
CVE-2000-0961
Buffer overflow in IMAP server in Netscape Messaging Server 4.15 Patch 2 allows local users to execute arbitrary commands via a long LIST command...
CVE-2000-1169
OpenSSH client prior to 2.3.0 can fail to disable X11 or agent forwarding, enabling a malicious SSH server to access the X11 display and sniff events or to access the ssh-agent. Affected component is the SSH client’s forwarding behavior; root cause is improper disabling of X11/agent forwarding. T...
CVE-2000-0923
CVE-2000-0923 concerns the authenticate.cgi CGI in Aplio PRO, where remote attackers can execute arbitrary commands by injecting shell metacharacters into the password parameter. The entry lists a CVSS v2 base score of 7.5 (HIGH) with network access, low attack complexity, and no authentication. ...
CVE-2000-0910
Affected software: Horde library 1.02. Vulnerability: arbitrary commands can be executed via shell metacharacters in the from address. Root cause: lack of proper sanitization of shell metacharacters in the From field. Impact: potential remote code execution as implied by command execution in the ...
CVE-2000-1141
The CVE-2000-1141 entry concerns Recourse ManTrap 1.6, where a kernel modification hides the ".." entry in /proc. This behavior allows attackers to determine they are in a honeypot system by inspecting /proc, indicating honeypot detection rather than a traditional remote compromise. The available...
CVE-2000-0995
CVE-2000-0995 describes a format-string vulnerability in the OpenBSD yp_passwd utility (and possibly other BSD-based OSes) that can allow an attacker to gain root privileges via a malformed name. The initial description states the vulnerability and impact; a patch is referenced (028_format_string...
CVE-2000-1106
Trend Micro InterScan VirusWall creates an Intscan share to the InterScan directory granting Full Control to the Everyone group, enabling attackers to modify VirusWall programs by altering permissions. The shared-access vulnerability is described in CVE-2000-1106 with a CVSS v2 base score of 4.6 ...
CVE-2000-0984
The CVE-2000-0984 vulnerability affects Cisco IOS 12.0–12.1 where the IOS HTTP server can be abused by requesting a URL containing “?/” to trigger a denial of service (crash/reload). Root cause: the HTTP server handling of certain query strings leads to a watchdog-driven reboot when the enable pa...
CVE-2000-0993
The CVE-2000-0993 entry describes a format-string vulnerability in the OpenBSD/libutil pw_error(3) function that, when invoked by setuid programs such as chpass, could let a local user gain superuser access. Public details indicate OpenBSD fixed the issue in 2000 within the affected libutil code,...