7994 matches found
CVE-2000-1115
The CVE-2000-1115 flaw affects the 602Pro LAN SUITE remote web administration component (webprox.dll) and is caused by a buffer overflow that can be triggered by a long GET request. Impact per available data includes denial of service and potential arbitrary command execution, with partial impact...
CVE-2000-0255
The CVE-2000-0255 entry affects the Nbase-Xyplex EdgeBlaster router. The vulnerability arises when an attacker performs a scan for the FormMail CGI program, which can cause a denial of service. Documented impact is network-based, with availability impact described as PARTIAL. The provided sources...
CVE-2000-1097
The CVE-2000-1097 issue affects the SonicWALL SOHO firewall web server, where remote attackers can cause a denial of service by sending a long username in the authentication page. The connected SonicWall advisory (SNWLID-2000-0001) confirms the same description and highlights the vulnerability, b...
CVE-2000-0523
The CVE-2000-0523 entry describes a buffer overflow in the logging feature of EServ versions 2.9.2 and earlier. The vulnerability allows an attacker to execute arbitrary commands via a long MKD command. Primary documentation indicates impact as arbitrary command execution with a high-severity sco...
CVE-2000-1068
The CVE-2000-1068 entry concerns Poll It 2.0: the pollit.cgi component is vulnerable to remote command execution via shell metacharacters supplied in the poll_options parameter. The underlying issue is improper handling of user-supplied input in that parameter, enabling an attacker to execute arb...
CVE-2000-0990
cmd5checkpw 0.21 and earlier allows remote attackers to cause a denial of service via an "SMTP AUTH" command with an unknown username...
CVE-2000-1071
The GUI installation for iCal 2.1 Patch 2 disables access control for the X server using an "xhost +" command, which allows remote attackers to monitor X Windows events and gain privileges...
CVE-2000-0996
CVE-2000-0996: A format-string vulnerability in the OpenBSD su utility (and possibly other BSD-based OSes) allows a local attacker to gain root privileges via a malformed shell. The issue is described in the NVD entry with a CVSS v2 base score of 7.2 (HIGH) and LOCAL, LOW–complexity conditions, e...
CVE-2000-1034
Buffer overflow in the System Monitor ActiveX control in Windows 2000 allows remote attackers to execute arbitrary commands via a long LogFileName parameter in HTML source code, aka the "ActiveX Parameter Validation" vulnerability...
CVE-2000-0909
The connected Mandrake advisory documents a buffer overflow in Pine 4.21 and earlier during the automatic mail checking (periodic new mail) when processing a long From: header, enabling remote code execution by a crafted email. The issue affects the Pine mail reader; an updated package (MDKSA-200...
CVE-2000-0992
Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. dot dot attack...
CVE-2000-0979
CVE-2000-0979 affects Windows 95/98/Me File and Print Sharing. The service does not properly enforce file-share passwords, allowing a remote attacker to bypass access controls by sending a 1‑byte password that matches the first character of the real password. The documented impact is partial conf...
CVE-2000-0922
CVE-2000-0922 affects Bytes Interactive Web Shopper shopper.cgi (2.0 and earlier). The vulnerability is a directory traversal via the newpage parameter (.. attack), enabling remote attackers to read arbitrary files on the web server. Multiple sources (NVD, CVE listings, Nessus/OpenVAS entries) co...
CVE-2000-1142
CVE-2000-1142 affects Recourse ManTrap 1.6. An attacker who can log in locally and cd into /proc/self/cwd and run pwd triggers an error that discloses that the host is a honeypot. The connected sources confirm the same description without providing additional technical details, such as root cause...
CVE-2000-0847
The CVE-2000-0847 entry describes a buffer overflow in the University of Washington c-client library (used by Pine and other programs). The vulnerability arises from processing a long X-Keywords header, enabling remote attackers to execute arbitrary commands. Documents explicitly identify the aff...
CVE-2000-0957
The pluggable authentication module for mysql pammysql before 0.4.7 does not properly cleanse user input when constructing SQL statements, which allows attackers to obtain plaintext passwords or hashes...
CVE-2000-0851
Buffer overflow in the Still Image Service in Windows 2000 allows local users to gain additional privileges via a long WMUSER message, aka the "Still Image Service Privilege Escalation" vulnerability...
CVE-2000-0861
Mailman 1.1 allows list administrators to execute arbitrary commands via shell metacharacters in the %listname macro expansion...
CVE-2000-1005
Directory traversal vulnerability in htmlwebstore.cgi and webstore.cgi CGI programs in eXtropia WebStore allows remote attackers to read arbitrary files via a .. dot dot attack on the page parameter...