CVE-2000-1130

CVE-2000-1130 affects McAfee WebShield SMTP 4.5. An attacker can bypass email content filtering rules by using extended ASCII characters in the attachment name, enabling partial confidentiality/integrity impact as indicated by the record. The vulnerability description provided by multiple sources...

CVE-2000-1116

CVE-2000-1116 affects TransSoft Broker FTP Server prior to 4.3.0.1. A buffer overflow caused by a long command can lead to remote denial of service and may allow arbitrary command execution. The provided documents specify the issue and affected version but do not include exploitation details or a...

CVE-2000-1173

CVE-2000-1173 affects Microsys CyberPatrol. The vulnerability stems from weak encryption (trivial encoding) for credit card numbers and no encryption for other registration data, enabling network sniffing to obtain sensitive information. Public details in the provided documents indicate partial c...

CVE-2000-1155

The CVE-2000-1155 entry affects the RHDaemon component of the RobinHood 1.1 web server running on BeOS R5 Pro and earlier. The root cause is a crafted, long HTTP request that can cause a denial of service. Public details across connected sources confirm the affected product/version and the vulner...

CVE-2000-1161

CVE-2000-1161 concerns AdCycle banner management: the build.cgi CGI is left in a web-accessible directory, enabling remote attackers to execute the program and access or delete the AdCycle databases. Connected sources corroborate the issue and describe a remediation: remove build.cgi from /cgi-bi...

CVE-2000-1152

Browser IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL...

CVE-2000-1152

CVE-2000-1152 concerns the BeOS Browser IRC client on BeOS r5 Pro and earlier. The issue is a denial-of-service triggered by a message containing a long URL, which the description indicates could be exploited remotely. The connected documents do not provide additional technical details on the vul...

CVE-2000-1118

CVE-2000-1118 affects 24Link 1.06 web server. An attacker can bypass access restrictions by prepending a path like "/+"/"." to the HTTP GET, causing unauthorized access. Root cause: improper handling of path prefixes in request parsing. Impact per CVSS: PARTIAL confidentiality, integrity, and ava...

CVE-2000-1188

CVE-2000-1188 : Quikstore Shopping Cart’s CGI (quikstore.cgi) is vulnerable to a directory traversal via the page parameter, enabling remote attackers to read arbitrary files. This aligns with NVD and Nessus notes and is complemented by CERT/CC and CVE history indicating input validation flaws in...

CVE-2000-1117

CVE-2000-1117 affects the Lotus Notes Client R5. The JVM’s Extended Control List (ECL) feature enables a timing side channel via getSystemResource to infer whether a local file exists, by comparing dialog timing when a Java applet accesses local files. An attacker using a malicious applet in the ...

CVE-2000-1150

Felix IRC client on BeOS r5 pro and earlier is affected. A remote adversary can trigger a denial of service by delivering a message containing a long URL, exploiting handling of URL strings in the client. The CVSSv2 base score is 5.0 (Medium) with Network access, required no authentication, and t...

CVE-2000-1075

Directory traversal vulnerability in iPlanet Certificate Management System 4.2 and Directory Server 4.12 allows remote attackers to read arbitrary files via a .. dot dot attack in the Agent, End Entity, or Administrator services...

CVE-2000-1005

Directory traversal vulnerability in htmlwebstore.cgi and webstore.cgi CGI programs in eXtropia WebStore allows remote attackers to read arbitrary files via a .. dot dot attack on the page parameter...

CVE-2000-1064

Buffer overflow in the LPD service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service...

CVE-2000-1003

NETBIOS client in Windows 95 and Windows 98 allows a remote attacker to cause a denial of service by changing a file sharing service to return an unknown driver type, which causes the client to crash...

CVE-2000-1004

Format string vulnerability in OpenBSD photurisd allows local users to execute arbitrary commands via a configuration file directory name that contains formatting characters...

CVE-2000-1050

Allaire JRun 3.0 http servlet server allows remote attackers to directly access the WEB-INF directory via a URL request that contains an extra "/" in the beginning of the request aka the "extra leading slash"...

CVE-2000-1020

Heap overflow in Worldclient in Mdaemon 3.1.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long URL...

CVE-2000-1078

ICQ Web Front HTTPd allows remote attackers to cause a denial of service by requesting a URL that contains a "?" character...

CVE-2000-1034

Buffer overflow in the System Monitor ActiveX control in Windows 2000 allows remote attackers to execute arbitrary commands via a long LogFileName parameter in HTML source code, aka the "ActiveX Parameter Validation" vulnerability...