CVE-2000-0341

The CVE-2000-0341 entry concerns ATRIUM Cassandra NNTP Server 1.10. The connected Nessus plugin and CVE listings indicate a remote buffer overflow in the AUTHINFO USER handling: providing a long login name can crash the server and, per the plugin, could allow remote code execution. This is a netw...

CVE-2000-0849

The CVE-2000-0849 entry describes a race condition in Microsoft Windows Media server that allows remote attackers to cause a denial of service in the Windows Media Unicast Service through a malformed request, aka the Unicast Service Race Condition vulnerability. Affected component is the Windows ...

CVE-2000-1144

CVE-2000-1144 affects Recourse ManTrap 1.6. The issue is that the chroot'ed root (/) has an inode number higher than normal, enabling an attacker to determine that the process is running inside a chroot environment. The available sources describe the vulnerability as exposing chroot presence (loc...

CVE-2000-0888

The CVE-2000-0888 entry describes a DoS in ISC BIND 8.2–8.2.2-P6 when processing SRV records. Connected documents confirm the vulnerability in BIND’s SRV handling (the “srv bug”) and state that remote attackers can crash named by sending an SRV record. Impact is denial of service; vulnerable comp...

CVE-2000-1042

CVE-2000-1042 affects Mandrake Linux (ypserv/ypbind). A buffer overflow in ypserv (and a DoS/format/buffer issue in ypbind) can allow an attacker to gain root privileges when ypserv is built without vsyslog(). Affects Mandrake 7.1 and earlier; MDKSA-2000:064 notes vulnerable components and recomm...

CVE-2000-0982

Consolidated details: The CVE affects Internet Explorer prior to version 5.5, where cached credentials for a secure site could be forwarded to insecure pages on the same site. This exposure could let remote attackers obtain credentials by monitoring connections to the web server. Root cause is th...

CVE-2000-0498

The CVE-2000-0498 vulnerability affects Unify eWave ServletExec. A remote attacker could view the source code of a JSP program by requesting a URL that uses the JSP extension in uppercase. Connected sources confirm the affected product and the exact attack vector; PT-2000-1436 notes no informatio...

CVE-2000-0917

CVE-2000-0917 describes a format-string vulnerability in LPRng’s use_syslog() in version 3.6.24 (and earlier), enabling remote attackers to execute arbitrary commands. Multiple sources corroborate: Red Hat RHSA-2000-065 notes vulnerability in 3.6.24 and earlier; CERT advisories document the forma...

CVE-2000-0865

CVE-2000-0865 affects Tridia Double Vision 3.07.00. The vulnerability is a buffer overflow in dvtermtype triggered by a long terminal type argument, allowing local users to gain root privileges. No exploit details or remediation are provided in the connected documents; exploitation status is not ...

CVE-2000-1148

The CVE-2000-1148 entry concerns VolanoChatPro server where configuration file permissions are world-readable and administrator passwords are stored in plaintext. This insecure configuration can allow local users to access sensitive credentials and potentially gain privileges on the server. The v...

CVE-2000-1146

Recourse ManTrap 1.6 allows attackers to cause a denial of service via a sequence of commands that navigate into and out of the /proc/self directory and executing various commands such as ls or pwd...

CVE-2000-0252

The CVE-2000-0252 entry concerns the Dansie Shopping Cart (cart.pl/cart.cgi). An input in a form variable allows remote command execution through shell metacharacters, due to insufficient input sanitization. This yields the potential for arbitrary commands to be run on affected systems. Public re...

CVE-2000-1089

CVE-2000-1089 is a buffer overflow in Microsoft’s IIS Phone Book Service (pbserver.dll) that, per the description, allows local users to execute arbitrary commands (Phone Book Service Buffer Overflow). Public material references MS00-094 as the corrective update and notes that the vulnerable comp...

CVE-2000-0901

The vulnerability CVE-2000-0901 affects the screen program (versions 3.9.5 and earlier). It stems from a format string vulnerability in the vbell_msg initialization, enabling local users to gain root privileges. Exploitation details are not provided in the supplied documents, and a remediation/pa...

CVE-2000-0852

The CVE-2000-0852 entry concerns multiple buffer overflows in the eject utility on FreeBSD (and possibly other OSes), allowing local users to gain root privileges. The connected documents confirm the affected component (eject) and the impact (local privilege escalation to root). No vendor-specifi...

CVE-2000-1162

Ghostscript before 5.10-16 is vulnerable to a local symlink attack that lets a local user overwrite files owned by others by creating predictable temporary files. The root cause involves using mktemp to create temporary files (as noted in vendor advisories), enabling file overwrites by users runn...

CVE-2000-0811

CVE-2000-0811 affects Auction Weaver 1.0–1.04 (Auction Weaver LITE) and stems from improper validation of directory traversal strings (..), enabling remote attackers to read arbitrary files through the username or bidfile fields. Affected products include CGI Script Center’s Auction Weaver LITE r...

CVE-2000-0967

CVE-2000-0967 affects PHP 3 and PHP 4 where user-supplied format strings are not properly sanitized in error log messages, enabling remote command execution via crafted error output. The vulnerability applies to PHP installations that log errors/warnings (format-string attacks via syslog/vsnprint...

CVE-2000-0860

The CVE-2000-0860 entry concerns PHP 3 and PHP 4 file-upload handling. The vulnerability arises from RFC 1867-based file uploads where an attacker can manipulate hidden form field names that correspond to internal PHP variables, enabling reading of arbitrary files. Public documentation in connect...

CVE-2000-0764

CVE-2000-0764 affects Intel Express 500 series switches. The vulnerability allows a remote attacker to cause a denial of service by sending a malformed IP packet, impacting availability (partial). No exploit vector or remediation details are provided in the supplied documents beyond the basic des...