CVE-2000-1052

The CVE-2000-1052 entry concerns Allaire JRun 2.3 server. Affected component: SSIFilter servlet. Root cause: remote attackers can directly invoke the SSIFilter servlet to obtain source code for executable content, leading to partial confidentiality impact. The public description states exposure o...

CVE-2000-0916

CVE-2000-0916 is a historical TCP-ISN prediction vulnerability affecting FreeBSD 4.1.1 and earlier (and possibly other BSD-based OSes). The root cause is an insufficient random initial sequence number (ISN) generator, enabling remote attackers to spoof TCP connections. Several connected sources c...

CVE-2000-1028

CVE-2000-1028 describes a buffer overflow in the HP-UX 11.0 cu program that may allow local users to gain privileges through a long -l command line argument. The vulnerability is local and occurs due to an unchecked or improperly sized argument input, enabling privilege escalation if exploited. N...

CVE-2000-0986

CVE-2000-0986 describes a buffer overflow in Oracle 8.1.5 applications (names, namesctl, onrsd, osslogin, tnslsnr, tnsping, trcasst, trcroute) that could allow local users to gain privileges via a long ORACLE_HOME environment variable. The connected documents confirm affected components and the r...

CVE-2000-0986

Buffer overflow in Oracle 8.1.5 applications such as names, namesctl, onrsd, osslogin, tnslsnr, tnsping, trcasst, and trcroute possibly allow local users to gain privileges via a long ORACLEHOME environmental variable...

CVE-2000-0885

Buffer overflows in Microsoft Network Monitor Netmon allow remote attackers to execute arbitrary commands via a long Browser Name in a CIFS Browse Frame, a long SNMP community name, or a long username or filename in an SMB session, aka the "Netmon Protocol Parsing" vulnerability. NOTE: It is high...

CVE-2000-0954

Shambala Server 4.5 stores passwords in plaintext, which could allow local users to obtain the passwords and compromise the server...

CVE-2000-1048

Directory traversal vulnerability in the logfile service of Wingate 4.1 Beta A and earlier allows remote attackers to read arbitrary files via a .. dot dot attack via an HTTP GET request that uses encoded characters in the URL...

CVE-2000-0817

Buffer overflow in the HTTP protocol parser for Microsoft Network Monitor Netmon allows remote attackers to execute arbitrary commands via malformed data, aka the "Netmon Protocol Parsing" vulnerability...

CVE-2000-1009

dump in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modifying the RSH variable to point to a Trojan horse program...

CVE-2000-1029

CVE-2000-1029 describes a buffer overflow in the host command that lets a remote attacker execute arbitrary commands via a long response to an AXFR (zone transfer) query. The available documents confirm this vulnerability can yield complete confidentiality, integrity, and availability impact as i...

CVE-2000-0918

Format string vulnerability in kvt in KDE 1.1.2 may allow local users to execute arbitrary commands via a DISPLAY environmental variable that contains formatting characters...

CVE-2000-1033

Serv-U FTP Server allows remote attackers to bypass its anti-hammering feature by first logging on as a valid user possibly anonymous and then attempting to guess the passwords of other users...

CVE-2000-1037

The CVE-2000-1037 issue affects Check Point Firewall-1 session agent versions 3.0 through 4.1. The root cause is that the service returns different error messages for invalid usernames versus invalid passwords, enabling remote attackers to enumerate valid usernames and perform brute-force passwor...

CVE-2000-0931

Pegasus Mail

CVE-2000-0817

CVE-2000-0817 affects Microsoft Network Monitor (Netmon) via the HTTP protocol parser. The security issue is a buffer overflow in the HTTP parser when processing malformed data, which could allow a remote attacker to execute arbitrary commands on a vulnerable system. The vulnerability is associat...

CVE-2000-1017

The CVE-2000-1017 entry concerns Webteachers Webdata (WebData database). The vulnerability allows remote attackers who have valid WebData accounts to read arbitrary files by submitting a request to import a file into the WebData database. The description specifies the attack flow but does not pro...

CVE-2000-0988

WinU 1.0–5.1 is affected by a backdoor password that enables remote attackers to access the administrative interface and modify configuration. The NVD entry describes an unauthenticated, remote-access flaw that provides complete administration capability without user interaction, enabling modific...

CVE-2000-1064

CVE-2000-1064 corresponds to a buffer overflow in the LPD service of HP JetDirect printer card firmware versions x.08.20 and earlier. The vulnerability allows remote attackers to cause a denial of service. The available connected documents do not provide explicit exploit details, affected model i...

CVE-2000-0955

CVE-2000-0955 affects Cisco Virtual Central Office 4000 (VCO/4K). The issue is weak encryption used to store usernames and passwords in the SNMP MIB, enabling an attacker who knows the community name to crack credentials and gain privileges. According to the NVD entry, this yields a CVSS v2 base ...