CVE-2000-1082

The xpenumresultset function in SQL Server and Microsoft SQL Server Desktop Engine MSDE does not properly restrict the length of a buffer before calling the srvparaminfo function in the SQL Server API for Extended Stored Procedures XP, which allows an attacker to cause a denial of service or...

CVE-2000-0908

BrowseGate 2.80 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long Authorization or Referer MIME headers in the HTTP request...

CVE-2000-0932

MAILsweeper for SMTP 3.x does not properly handle corrupt CDA documents in a ZIP file and hangs, which allows remote attackers to cause a denial of service...

CVE-2000-0933

The Input Method Editor IME in the Simplified Chinese version of Windows 2000 does not disable access to privileged functionality that should normally be restricted, which allows local users to gain privileges, aka the "Simplified Chinese IME State Recognition" vulnerability...

CVE-2000-0959

glibc2 does not properly clear the LDDEBUGOUTPUT and LDDEBUG environmental variables when a program is spawned from a setuid program, which could allow local users to overwrite files via a symlink attack...

CVE-2000-1118

24Link 1.06 web server allows remote attackers to bypass access restrictions by prepending strings such as "/+/" or "/." to the HTTP GET request...

CVE-2000-1153

PostMaster 1.0 in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL...

CVE-2000-0977

mailfile.cgi CGI program in MailFile 1.10 allows remote attackers to read arbitrary files by specifying the target file name in the "filename" parameter in a POST request, which is then sent by email to the address specified in the "email" parameter...

CVE-2000-0978

bbd server in Big Brother System and Network Monitor before 1.5c2 allows remote attackers to execute arbitrary commands via the "&" shell metacharacter...

CVE-2000-1134

Multiple shell programs on various Unix systems, including 1 tcsh, 2 csh, 3 sh, and 4 bash, follow symlinks when processing redirects aka here-documents or in-here documents, which allows local users to overwrite files of other users via a symlink attack...

CVE-2000-1093

Buffer overflow in AOL Instant Messenger before 4.3.2229 allows remote attackers to execute arbitrary commands via a long "goim" command...

CVE-2000-0917

Format string vulnerability in usesyslog function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands...

CVE-2000-0900

Directory traversal vulnerability in ssi CGI program in thttpd 2.19 and earlier allows remote attackers to read arbitrary files via a "%2e%2e" string, a variation of the .. dot dot attack...

CVE-2000-1153

PostMaster 1.0 on BeOS r5 Pro and earlier is affected by a denial-of-service vulnerability triggered by processing a message containing a long URL. The available references reiterate the same description without additional technical specifics (no details on root cause, affected versions beyond th...

CVE-2000-1125

CVE-2000-1125 affects Red Hat Linux 6.2 where the restore utility trusts the pathname in the RSH environment variable. A local attacker can set RSH to a Trojan horse program, potentially gaining root privileges. The vulnerability arises from unvalidated use of RSH in invoking external programs (r...

CVE-2000-0922

Directory traversal vulnerability in Bytes Interactive Web Shopper shopping cart program shopper.cgi 2.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot attack on the newpage parameter...

CVE-2000-0984

The HTTP server in Cisco IOS 12.0 through 12.1 allows local users to cause a denial of service crash and reload via a URL containing a "?/" string...

CVE-2000-1168

CVE-2000-1168 affects IBM HTTP Server 1.3.6 (based on Apache). The vulnerability allows remote attackers to cause a denial of service and may lead to arbitrary command execution through a long GET request. The associated NVD entry lists a base score of 7.5 (High; Network vector, low attack comple...

CVE-2000-0947

Format string vulnerability in cfd daemon in GNU CFEngine before 1.6.0a11 allows attackers to execute arbitrary commands via format characters in the CAUTH command...

CVE-2000-1130

CVE-2000-1130 affects McAfee WebShield SMTP 4.5. An attacker can bypass email content filtering rules by using extended ASCII characters in the attachment name, enabling partial confidentiality/integrity impact as indicated by the record. The vulnerability description provided by multiple sources...