7996 matches found
CVE-2000-0542
Technical details about CVE-2000-0542 are not provided in the connected documents. The available sources list the issue as improper Radius accounting after failed login but no public exploit, patch, or affected versions are detailed here. Monitor for updates.
CVE-2000-1181
The CVE-2000-1181 issue affects RealNetworks RealServer 7 and earlier, where an HTTP request to /admin/includes/ discloses parts of the server’s memory contents (potentially including credentials and tokens). The root cause is memory contents disclosure via an accessible admin path, enabling remo...
CVE-2000-0966
CVE-2000-0966 refers to a buffer overflow in HP-UX 11.0 (and earlier) specifically in the lpspooler component of the fileset PrinterMgmt.LP-SPOOL. The underlying issue is a buffer overflow that could allow a local user to gain privileges. The public sources in the provided documents confirm affec...
CVE-2000-0292
The CVE-2000-0292 entry concerns the Adtran MX2800 M13 Multiplexer. The vulnerability is a remote DoS caused by sending a ping flood to the Ethernet interface, which crashes the device. The NVD record lists a CVSS v2 base score of 5.0 (Medium) with network attack vector, low attack complexity, no...
CVE-2000-0980
This CVE concerns the NMPI listener component of Microsoft NWLink. The affected element is the NMPI (Name Management Protocol on IPX) listener in NWLink, which fails to properly filter packets originating from a broadcast address. Under this flaw, remote attackers can trigger a broadcast storm an...
CVE-2000-0965
The CVE-2000-0965 entry affects HP-UX VVOS 10.24 and 11.04, where the NSAPI plugins for TGA and the Java Servlet proxy are the vulnerable components. The underlying issue is a condition that allows an attacker to cause a denial of service via high CPU utilization. No explicit remediation or patch...
CVE-2000-1011
CVE-2000-1011 describes a buffer overflow in the catopen() function affecting FreeBSD 5.0 and earlier (and possibly other OSes). The vulnerability allows local users to gain root privileges via a long environment variable. Affected component: catopen() in the C library runtime used by multiple OS...
CVE-2000-0943
CVE-2000-0943 describes a buffer overflow in the bftpd daemon (bftp) version 1.0.11 that can be triggered remotely by a very long USER command. The vulnerability can cause a denial of service and may allow execution of arbitrary commands on the server. Affected product evidence includes Nessus re...
CVE-2000-0952
CVE-2000-0952 affects the Global CGI program, specifically global.cgi, in Global 3.55 and earlier on NetBSD. The vulnerability allows remote attackers to execute arbitrary commands via shell metacharacters in input handled by the CGI. Root cause: improper handling of shell input leading to comman...
CVE-2000-1051
CVE-2000-1051 describes a directory traversal vulnerability in Allaire JRun 2.3 server where an attacker can read arbitrary files via the SSIFilter servlet. Affected software is Allaire JRun 2.3 server; the underlying flaw is in the SSIFilter servlet handling that allows path traversal. The NVD m...
CVE-2000-1059
The CVE-2000-1059 issue affects Mandrake Linux 7.0 and 7.1, where the default /etc/X11/Xsession configuration disables Xauthority via an "xhost + localhost" setting. This allows local users to connect to an X server on the localhost, potentially sniffing X Windows events and escalating privileges...
CVE-2000-1073
csstart program in iCal 2.1 Patch 2 searches for the cshttpd program in the current working directory, which allows local users to gain root privileges by creating a Trojan Horse cshttpd program in a directory and calling csstart from that directory...
CVE-2000-0283
The default installation of IRIX Performance Copilot allows remote attackers to access sensitive system information via the pmcd daemon...
CVE-2000-0915
fingerd in FreeBSD 4.1.1 allows remote attackers to read arbitrary files by specifying the target file name instead of a regular user name...
CVE-2000-0849
Race condition in Microsoft Windows Media server allows remote attackers to cause a denial of service in the Windows Media Unicast Service via a malformed request, aka the "Unicast Service Race Condition" vulnerability...
CVE-2000-1132
DCForum cgforum.cgi CGI script allows remote attackers to read arbitrary files, and delete the program itself, via a malformed "forum" variable...
CVE-2000-0926
SmartWin CyberOffice Shopping Cart 2 aka CyberShop allows remote attackers to modify price information by changing the "Price" hidden form variable...
CVE-2000-0287
The BizDB CGI script bizdb-search.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the dbname parameter...