CVE-2001-0351

The CVE-2001-0351 entry concerns Microsoft Windows 2000 Telnet Service. The vulnerability allows an unprivileged local user to invoke a system call that terminates an existing Telnet session, producing a denial-of-service condition. Affected software is Windows 2000 with the Telnet Service; the u...

CVE-2001-0237

CVE-2001-0237 affects Microsoft Windows 2000 domain controllers, where the Kerberos service can leak memory when it receives certain invalid Kerberos requests, potentially exhausting memory and causing a denial of service. Affected component is the Kerberos service (KDC) on Windows 2000 domain co...

CVE-2001-0340

An issue in Outlook Web Access (OWA) for Microsoft Exchange 2000 Server and Internet Explorer lets a malicious HTML attachment execute script when opened via OWA, with the script running under the OWA user’s privileges and potentially accessing/manipulating messages and folders on the server. Exp...

CVE-2001-0345

CVE-2001-0345 affects Microsoft Windows 2000 Telnet Service. A denial-of-service occurs when remote attackers establish many idle Telnet sessions to prevent the service from enforcing idle-timeout values, exhausting available sessions. Root cause: the Telnet Service fails to enforce pre-defined t...

CVE-2001-0347

The connected CERT/KB entry confirms a vulnerability in Microsoft Windows 2000 Telnet Service that permits remote authentication using domain accounts without specifying a domain name, by exploiting a wildcard domain search. The issue can lead to unauthorized domain-login or information leakage. ...

CVE-2000-0945

CVE-2000-0945 affects Cisco Catalyst 3500 XL devices where the web configuration interface exposes an HTTP path /exec/ and allows remote command execution when the enable password is not set. Provided connected documents describe that an unauthenticated user can trigger arbitrary commands by requ...

CVE-2000-0568

Sybergen Secure Desktop 2.1 is affected by CVE-2000-0568 due to improper protection against ICMP Type 9 false router advertisements, allowing remote attackers to modify default routes. The available sources document the product and impact but do not provide specific exploit code, affected version...

CVE-2000-0799

CVE-2000-0799 affects SGI IRIX InPerson (versions 5.3–6.5.10). Local users can escalate privileges via a symlink attack on the .ilmpAAA temporary file, potentially achieving root access. There are no SGI patches listed; SGI advises removing InPerson and replacing it with SGImeeting, with the work...

CVE-2000-0620

The vulnerability CVE-2000-0620 affects the libX11 X library. A resource mask of 0 can cause the library to enter an infinite loop, enabling remote denial of service. The description indicates a network-exposed condition with a potential impact to availability, but the documents do not provide a ...

CVE-2000-0569

Technical details for CVE-2000-0569 are not publicly available in the provided documents. Monitor for updates.

CVE-2000-0576

CVE-2000-0576 affects Oracle Web Listener for AIX versions 4.0.7.0.0 and 4.0.8.1.0. The vulnerability enables a remote attacker to cause a denial of service by requesting a malformed URL. The description does not specify the underlying root cause beyond the malformed URL trigger, nor does it prov...

CVE-2001-0241

CVE-2001-0241 affects the IIS 5.0 ISAPI Internet Printing Protocol extension (.printer) on Windows 2000. A buffer overflow in the Host: field of HTTP Printer requests allows remote code execution with the web server’s privileges. The provided documents describe an unchecked buffer in the ISAPI .p...

CVE-2000-0243

The CVE-2000-0243 issue affects AnalogX SimpleServer:WWW, version 1.03. A remote denial-of-service is triggered by a short GET request to a CGI-bin path, crashing the server. The vulnerability is tied to the handling of specially formatted requests (exactly 8 characters after /cgi-bin/). No speci...

CVE-2000-0799

inpview in InPerson in SGI IRIX 5.3 through IRIX 6.5.10 allows local users to gain privileges via a symlink attack on the .ilmpAAA temporary file...

CVE-2000-1047

The CVE-2000-1047 issue affects Lotus Domino’s SMTP service (versions 5.0.4 and earlier). The root cause is improper validation of the ENVID parameter in a MAIL FROM command, allowing a remote, unauthenticated attacker to trigger a buffer overflow. Consequences documented in the Nessus plugin inc...

CVE-2000-0897

CVE-2000-0897 affects Small HTTP Server 2.03 and earlier. The issue allows remote attackers to trigger a denial of service by repeatedly requesting a URL that references a directory lacking an index.html, causing memory to be consumed without release after the request completes. The available doc...

CVE-2001-0348

CVE-2001-0348 affects Microsoft Windows 2000 Telnet Service. A vulnerability in range checking on incoming Telnet session requests can be exploited by sending a long logon sequence including delete (backspace) characters to crash the Telnet Service, causing a denial of service. Microsoft addresse...

CVE-2001-0346

The CVE-2001-0346 entry pertains to Microsoft Windows 2000 Telnet Service, where a handle leak during termination of an excessive number of Telnet sessions can exhaust system handles and cause a denial-of-service across services. Affected component: Windows 2000 Telnet Service; root cause: failur...

CVE-2000-0877

CVE-2000-0877 concerns the MailForm 2.0 product, specifically the mailform.pl CGI script. The vulnerability allows remote attackers to read arbitrary files by supplying a filename in the XX-attach_file parameter, which MailForm then sends to the attacker. The issue directly concerns the confident...

CVE-2001-0344: Undefined Security Weakness

An SQL query method in Microsoft SQL Server 2000 Gold and 7.0 using Mixed Mode allows local database users to gain privileges by reusing a cached connection of the sa administrator account...