CVE-2000-0702

The net.init rc script in HP-UX 11.00 S008net.init allows local users to overwrite arbitrary files via a symlink attack that points from /tmp/stcp.conf to the targeted file...

CVE-2000-1051

Directory traversal vulnerability in Allaire JRun 2.3 server allows remote attackers to read arbitrary files via the SSIFilter servlet...

CVE-2000-0868

The default configuration of Apache 1.3.12 in SuSE Linux 6.4 allows remote attackers to read source code for CGI scripts by replacing the /cgi-bin/ in the requested URL with /cgi-bin-sdb/...

CVE-2000-1095

modprobe in the modutils 2.3.x package on Linux systems allows a local user to execute arbitrary commands via shell metacharacters...

CVE-2000-1018

The CVE-2000-1018 entry concerns the shred 1.0 file wiping utility. The vulnerability is that shred does not properly open a target file for overwriting or flush its buffers, which can prevent it from fully replacing the file’s data. As a result, local users may be able to recover previously dele...

CVE-2000-0909

Buffer overflow in the automatic mail checking component of Pine 4.21 and earlier allows remote attackers to execute arbitrary commands via a long From: header...

CVE-2000-0926

The CVE-2000-0926 entry concerns SmartWin CyberOffice Shopping Cart 2 (CyberShop). Vulnerability: remote attackers can modify price information by altering the hidden Price form variable. Affected component: the shopping cart/web interface that processes the Price field. Impact: data integrity co...

CVE-2000-0953

Affected software: Shambala Server 4.5. The CVE describes a remote denial of service caused by opening then closing a connection. The provided documents do not specify the root cause, impact details beyond DoS, vendor/version-specific fixes, or available mitigations. Exploitation status and in-th...

CVE-2000-1167

Affected software: FreeBSD ppp utility (4.1.1 and earlier). Vulnerability : inadequate access restriction under the nat deny_incoming directive allows remote attackers to connect to the target system. Impact : per the CVSS data, network access with partial confidentiality, integrity, and availabi...

CVE-2000-0958

CVE-2000-0958 concerns HotJava Browser 3.0, where remote attackers can access the DOM of a web page by opening a javascript: URL in a named window. The available documents identify the affected product and the basic interaction (javascript: URLs and window naming) but do not provide deeper root-c...

CVE-2000-1136

CVE-2000-1136 affects elvis-tiny before 1.4-10 in Debian GNU/Linux (and possibly other Linux OS). The issue is a symlink attack that lets local users overwrite files of other users. Exploitation is Local with Low complexity and no authentication required; impacts include partial confidentiality, ...

CVE-2000-1145

CVE-2000-1145 affects Recourse ManTrap 1.6. The issue arises when an attacker with root privileges uses utilities (e.g., crash, fsdb) to read /dev/mem and raw disks, enabling identification of ManTrap processes or modification of arbitrary data files. Reported impact aligns with partial confident...

CVE-2000-1003

NETBIOS client in Windows 95 and Windows 98 allows a remote attacker to cause a denial of service by changing a file sharing service to return an unknown driver type, which causes the client to crash...

CVE-2000-0851

The CVE-2000-0851 issue is a buffer overflow in the Windows 2000 Still Image Service that enables local users to escalate privileges via a long WM_USER message. Affected component: Still Image Service on Windows 2000. Root cause: buffer overflow in handling WM_USER message. Impact: local privileg...

CVE-2000-1019

Ultraseek Web Server (Inktomi/Verity) is affected by CVE-2000-1019 in 3.1 and 3.1.10. A remote attacker can cause a denial-of-service by sending a malformed URL, leading to the server hanging or becoming unresponsive. Related OpenVAS/Nessus entries corroborate a remote DoS via malformed URLs and ...

CVE-2000-0883

The CVE-2000-0883 entry concerns Mandrake Linux mod_perl on Apache where the default mod_perl configuration (Mandrake 6.1–7.1) sets the /perl/ directory to be browseable, allowing remote listing of that directory. The vulnerability arises from an insecure Options directive that permits directory ...

CVE-2000-0941

The CVE-2000-0941 entry concerns the KW Whois CGI script (KW Web) version 1.0, which fails to filter shell metacharacters in the 'whois' parameter. This allows an unauthenticated, remote attacker to execute arbitrary commands with the privileges of the http daemon. The vulnerability is demonstrat...

CVE-2000-1061

CVE-2000-1061 involves the Microsoft Virtual Machine (VM) in Internet Explorer 4.x–5.x, where an unsigned applet can create and use ActiveX controls. This enables a remote attacker to bypass IE security settings and execute arbitrary commands via a malicious web page or email. The underlying issu...

CVE-2000-0862

The vulnerability CVE-2000-0862 affects the Allaire Spectra 1.0.1 product, specifically its administrative interface utility. The exposed issue allows remote attackers to read and modify sensitive configuration information. The NVD entry lists a CVSS v2 base score of 6.4 (Medium) with network acc...

CVE-2000-1014

The CVE-2000-1014 entry concerns a format string vulnerability in the search97.cgi CGI script of the SCO help HTTP server for Unixware 7 . The flaw allows remote attackers to execute arbitrary commands through format string characters supplied in the queryText parameter, enabling potential remote...