CVE-2000-1028

Buffer overflow in cu program in HP-UX 11.0 may allow local users to gain privileges via a long -l command line argument...

CVE-2000-1008

PalmOS 3.5.2 and earlier uses weak encryption to store the user password, allowing attackers with physical access to decrypt the password and gain access to the device. The vulnerability affects the password storage mechanism and is exploitable only with local access; no exploit details or mitiga...

CVE-2000-1008

PalmOS 3.5.2 and earlier uses weak encryption to store the user password, which allows attackers with physical access to the Palm device to decrypt the password and gain access to the device...

CVE-2000-0971

Avirt Mail 4.0 and 4.2 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long "RCPT TO" or "MAIL FROM" command...

CVE-2000-0906

Directory traversal vulnerability in Moreover.com cachedfeed.cgi script version 4.July.00 allows remote attackers to read arbitrary files via a .. dot dot attack on the category or format parameters...

CVE-2000-0907

CVE-2000-0907 affects EServ 2.92 Build 2982. Remote attackers can exploit long HELO and MAIL FROM commands to cause a denial of service and possibly execute arbitrary commands. The CVSS v2 base score is 7.5 (HIGH), with network access and low attack complexity. The description explicitly states t...

CVE-2000-1017

Webteachers Webdata allows remote attackers with valid Webdata accounts to read arbitrary files by posting a request to import the file into the WebData database...

CVE-2000-0902

CVE-2000-0902 affects PhotoAlbum (getalbum.php) prior to version 0.9.9. The vulnerability allows remote attackers to read arbitrary files via a directory traversal (..). NVD lists a CVSSv2 base score of 5.0 (Medium) with partial confidentiality impact; no exploitation details or patch information...

CVE-2000-1066

The CVE-2000-1066 entry affects the getnameinfo function in FreeBSD 4.1.1 and earlier (and possibly other operating systems). The vulnerability allows a remote attacker to cause a denial of service by supplying a long DNS hostname. The available documents confirm this DoS impact but do not provid...

CVE-2000-0950

CVE-2000-0950 affects the x-gw component of the TIS Firewall Toolkit (FWTK). The root cause is a format string vulnerability in x-gw that allows local users to execute arbitrary commands via a malformed display name. Impact as described: complete confidentiality, integrity, and availability could...

CVE-2000-1012

FreeBSD 5.0 and earlier are affected by CVE-2000-1012 due to the catopen function reading files via the LANG environment variable. Local users can read arbitrary files, yielding complete confidentiality and integrity impacts as described in the NVD entry (AV:L/AC:L/Au:N/C:C/I:C/A:C). The vulnerab...

CVE-2000-1015

The CVE-2000-1015 entry concerns Slashcode prior to version 2.0 Alpha, which ships with a default administrative password. The root cause is the presence of this default credential, enabling remote attackers to gain Slashcode privileges and potentially execute arbitrary commands. Documented impac...

CVE-2000-1053

Allaire JRun 2.3.3 server is affected by CVE-2000-1053. The vulnerability allows remote attackers to compile and execute JSP code by injecting it through a cross-site scripting (CSS) attack and then directly invoking the com.livesoftware.jrun.plugins.JSP JSP servlet. Exploitation details, affecte...

CVE-2000-0906

The CVE-2000-0906 entry concerns Moreover.com’s cached_feed.cgi script (version 4.July.00). The vulnerability is a directory traversal flaw that allows remote attackers to read arbitrary files by supplying a .. (dot dot) payload in the category or format parameters. The available sources (NVD/NVD...

CVE-2000-0971

Affected software : Avirt Mail 4.0 and 4.2. Vulnerability : Remote attackers can trigger a denial of service and possibly execute arbitrary commands by sending an abnormally long RCPT TO or MAIL FROM command via SMTP. Root cause / details : The available documents describe the impact but do not e...

CVE-2000-1020

CVE-2000-1020 describes a heap overflow in Worldclient of MDaemon (versions 3.1.1 and earlier) that can be triggered by a long URL, allowing remote attackers to cause a denial of service and potentially execute arbitrary commands. The issue is exploitable over the network without authentication, ...

CVE-2000-0905

QNX Embedded Resource Manager (Voyager web server 2.01B on QNX 405 demo disks) is affected. Remote attackers can read sensitive system statistics via embedded.html. The CVE entry (CVE-2000-0905) has a NVD base score of 5.0 (Medium). No explicit remediation or patch information is provided in the ...

CVE-2000-1065

CVE-2000-1065 concerns the IP implementation of HP JetDirect printer card firmware (versions up to x.08.20 and earlier). The vulnerability allows remote attackers to cause a denial of service (printer crash) by sending a malformed packet. The connected documents confirm affected product (HP JetDi...

CVE-2000-1030

CS&T CorporateTime for the Web is vulnerable to user enumeration: it returns different error messages for invalid usernames vs invalid passwords, allowing remote attackers to determine valid usernames on the server. Root cause is inconsistent authentication error handling; impact is partial confi...

CVE-2000-1009

CVE-2000-1009 concerns Red Hat Linux 6.2 where the backup tool dump relies on the RSH environment variable to decide which program to run remotely. The pathname specified by RSH is trusted, enabling local users to substitute a Trojan horse program and gain root privileges. The root cause is impro...