CVE-2000-0971

Avirt Mail 4.0 and 4.2 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long "RCPT TO" or "MAIL FROM" command...

CVE-2000-1092

CVE-2000-1092 affects EZshopper v3.0 and v2.0 where loadpage.cgi fails to properly validate the parameter; inserting a leading “/” can cause local file listing and reading of EZshopper data files. The root cause is insufficient input validation allowing directory traversal-like behavior, enablin...

CVE-2000-1154

RHConsole in RobinHood 1.1 web server for BeOS r5 Pro and earlier is affected. Affected component: RHConsole/web server; vulnerability allows remote attackers to cause a denial of service via a long HTTP request. The description specifies DoS impact but provides no details on root cause, versions...

CVE-2000-0946

Compaq Easy Access Keyboard software 1.3 does not properly disable access to custom buttons when the screen is locked, which could allow an attacker to gain privileges or execute programs without authorization...

CVE-2000-0904

Voyager web server 2.01B in the demo disks for QNX 405 stores sensitive web client information in the .photon directory in the web document root, which allows remote attackers to obtain that information...

CVE-2000-0963

Buffer overflow in ncurses library allows local users to execute arbitrary commands via long environmental information such as TERM or TERMINFODIRS...

CVE-2000-1158

The CVE-2000-1158 entry concerns NAI Sniffer Agent that uses base64 encoding for authentication, enabling an attacker to sniff network traffic and potentially recover usernames and passwords. The NVD records a high base score (7.5) with network attack vector and low attack complexity, and confide...

CVE-2000-1081

Microsoft SQL Server extended stored procedures vulnerability CVE-2000-1081 affects xp_displayparamstmt in SQL Server and MSDE. The issue arises from insufficiently restricting the input buffer length before calling srv_paraminfo in the Extended Stored Procedures API, enabling potential denial of...

CVE-2000-1160

The CVE-2000-1160 entry describes a remote DoS against the NAI Sniffer Agent caused by a flood of login requests over the network. Affected product: NAI Sniffer Agent. Vulnerable component/behavior: handling of login requests (root cause not detailed in the provided documents). Impact: Partial lo...

CVE-2000-1093

AOL Instant Messenger contains buffer overflow vulnerabilities in the AIM URI handler and command-line/URI parsing that can be triggered by a long goim/aim request, allowing remote execution of arbitrary commands on affected clients. The issue affects AIM before 4.3.2229; exploitation can crash t...

CVE-2000-1176

CVE-2000-1176 describes a directory-traversal vulnerability in YaBB’s search.pl CGI script, permitting remote attackers to read arbitrary files by abusing a .. (dot dot) input in the catsearch form field. The issue is documented for YaBB SE configurations, including references to older plugins th...

CVE-2000-1128

The CVE describes a local privilege escalation in McAfee VirusScan 4.5 caused by not quoting ImagePath, which can allow a local user to place a Trojan executable (common.exe) in C:\Program Files by altering the search path. The affected component is the VirusScan service/installation that reads t...

CVE-2000-1086

The CVE-2000-1086 entry affects Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE). The vulnerability lies in the xp_printstatements function, which fails to properly restrict the length of a buffer before calling srv_paraminfo in the SQL Server API for Extended Stored Procedures (XP)...

CVE-2000-1186

CVE-2000-1186 describes a buffer overflow in the phf CGI program that allows remote command execution by supplying a large number of arguments and a long MIME header. The NVD entry lists a-network attack vector, low complexity, no authentication, and partial CIA impact with a base score of 7.5 (H...

CVE-2000-0920

Directory traversal vulnerability in BOA web server 0.94.8.2 and earlier allows remote attackers to read arbitrary files via a modified .. dot dot attack in the GET HTTP request that uses a "%2E" instead of a "."...

CVE-2000-0898

CVE-2000-0898 affects Small HTTP Server 2.01. The issue is improper handling of Server Side Includes (SSI) tags containing null values, allowing local users and possibly remote attackers to crash the server by inserting an SSI into an HTML file. The NVD data indicates partial impact to availabili...

CVE-2000-1098

The CVE-2000-1098 entry concerns the web server component of the SonicWALL SOHO firewall. A remote attacker can cause a denial of service by sending an empty GET or POST request, impacting availability (CVSS: Network vector, low complexity, no authentication, partial availability impact). Public ...

CVE-2000-1100

The vulnerability CVE-2000-1100 affects the PostACI webmail system where the default configuration installs /includes/global.inc in the web root, enabling remote reads of sensitive data (e.g., database usernames and passwords) via a direct HTTP GET. The NVD description confirms this exposure; no ...

CVE-2000-1138

CVE-2000-1138 affects Lotus Notes R5 client (R5.0.5 and earlier). The issue is that the client does not properly warn users when an S/MIME email message has been modified, allowing an attacker to modify the email in transit without detection. The available documents clearly identify the affected ...

CVE-2000-1185

The CVE-2000-1185 entry concerns the telnet proxy component of the RideWay PN proxy server. According to the description, remote attackers can cause a denial of service by sending a flood of connections containing malformed requests. The primary documented impact is a partial loss of availability...