CVE-2000-0764

CVE-2000-0764 affects Intel Express 500 series switches. The vulnerability allows a remote attacker to cause a denial of service by sending a malformed IP packet, impacting availability (partial). No exploit vector or remediation details are provided in the supplied documents beyond the basic des...

CVE-2000-0991

Hilgraeve HyperTerminal client for Windows 98/ME/2000 is affected by CVE-2000-0991. The vulnerability is a buffer overflow in the telnet URL handling, allowing remote attackers to execute arbitrary commands via a long telnet URL over a network. Affected component: HyperTerminal client; root cause...

CVE-2000-0928

CVE-2000-0928 affects WQuinn QuotaAdvisor 4.1. The vulnerability allows users to list directories and files by running a report on targeted shares, exposing partial confidentiality. The root cause/details beyond this description are not provided in the connected documents. CVSS base score is 2.1 ...

CVE-2000-1057

CVE-2000-1057 : Vulnerabilities in the database configuration scripts of HP OpenView Network Node Manager (NNM) 6.1 and earlier allow local users to gain privileges, potentially via insecure permissions. The public documents do not specify affected versions beyond 6.1 and earlier, nor provide exp...

CVE-2000-0932

MAILsweeper for SMTP 3.x is affected by a vulnerability where corrupt CDA documents in a ZIP file are not handled properly, causing the application to hang and enabling a remote denial of service . The description does not provide exploit specifics, affected versions beyond the 3.x line, or remed...

CVE-2000-0937

The CVE concerns the Samba Web Administration Tool (SWAT) shipped with Samba 2.0.7, where login attempts that have a correct username but wrong password are not logged. This omission can enable brute-force password guessing by an attacker. Connected sources corroborate that SWAT in Samba 2.0.7 is...

CVE-2000-0908

CVE-2000-0908 refers to BrowseGate proxy vulnerability where HTTP headers that are too long in Authorization or Referer can cause a denial of service and may allow arbitrary code execution. OpenVAS and Tenable Nessus entries describe the flaw as an HTTP header overflow that can crash the proxy or...

CVE-2000-0844

The connected records confirm CVE-2000-0844 affects Unix locale subsystem functions that fail to cleanse user-supplied format strings, enabling local attackers to execute arbitrary commands through gettext, catopen, and related calls. The root cause is improper sanitization of format strings in l...

CVE-2000-0111

The CVE-2000-0111 entry concerns the RightFax web client, where predictable session numbers can enable an attacker to hijack user sessions. Affected product: RightFax web client. Root cause: session identifiers are predictable, allowing session hijacking without additional authentication. Impact:...

CVE-2000-0853

YaBB Bulletin Board vulnerability (CVE-2000-0853) affects YaBB.pl: an input validation flaw in the file parameter (num) allows remote attackers to read arbitrary server files via path traversal (e.g., ../../../../../../../../etc/passwd%00) and the .txt suffix handling. This enables reading files ...

CVE-2000-0848

CVE-2000-0848 describes a buffer overflow in IBM WebSphere Application Server (WAS) that allows remote attackers to execute arbitrary commands via a long Host header in HTTP requests. The vulnerability is tied to the server’s handling of the Host: header, leading to potential remote code executio...

CVE-2000-0961

CVE-2000-0961 affects Netscape Messaging Server 4.15 Patch 2 with a buffer overflow in the IMAP LIST handling. The vulnerability could allow an attacker to execute arbitrary commands, reported as affecting local users (per CVE description) and, per a Nessus plugin, authenticated users potentially...

CVE-2000-1146

Technical details for CVE-2000-1146 are not publicly provided in the supplied documents. Available description notes a denial-of-service via /proc/self navigation in Recourse ManTrap 1.6. Monitor for updates.

CVE-2000-0834

CVE-2000-0834 : The Windows 2000 Telnet client defaults to NTLM authentication, enabling remote attackers to capture and replay the NTLM challenge/response via a telnet:// URL pointing at a malicious server. The vulnerability affects the Windows 2000 Telnet client’s NTLM authentication behavior a...

CVE-2000-1006

CVE-2000-1006 affects Microsoft Exchange Server 5.5 and relates to vulnerable MIME header handling when a blank charset is specified (charset=""). The issue allows a remote attacker to cause a denial-of-service condition by sending malformed MIME headers. The vulnerability is associated with Exch...

CVE-2000-1050

The CVE-2000-1050 entry concerns Allaire JRun 3.0/3.1-era HTTP servlet servers where an information-disclosure vulnerability allows remote attackers to access WEB-INF (and related) directories. The root cause is an information-disclosure path handling flaw triggered by a URL request that contains...

CVE-2000-0729

CVE-2000-0729 affects FreeBSD 3.x, 4.x, and 5.x, where local users can cause a denial of service by executing a program with a malformed ELF image header. The available documents do not provide exploitation details, affected binaries, patch versions, or remediation guidance. No root cause or fixe...

CVE-2000-0934

Glint in Red Hat Linux 5.2 is affected. The vulnerability allows local users to overwrite arbitrary files and cause a denial of service via a symlink attack. Root cause is a symlink-related flaw in Glint that enables path manipulation leading to file overwrites and service disruption. No explicit...

CVE-2000-0672

The CVE-2000-0672 issue concerns the default configuration of Jakarta Tomcat which does not restrict access to the /admin context, enabling a remote attacker to read arbitrary files by invoking administrative servlets to add a context for the root directory. The vulnerability affects the admin co...

CVE-2000-0278

The CVE-2000-0278 entry concerns SalesLogix Eviewer’s slxweb.dll admin CGI, which can be triggered remotely without authentication to cause a denial of service. Connected NASL details specify that requesting GET /scripts/slxweb.dll/admin?command=shutdown crashes the remote host, indicating a remo...