CVE-2000-0375

The CVE-2000-0375 issue affects the FreeBSD 3.2 kernel. The vulnerability arises because the kernel follows symbolic links when creating core dump files, due to improper handling of symlinks. This allows a local attacker to modify arbitrary files (integrity impact: partial) by exploiting core dum...

CVE-2000-0313

Technical details about CVE-2000-0313 are not provided in the connected documents. The initial description mentions an OpenBSD 2.6 local interface-media change issue, but no concrete product/version specifics or remediation are included here. Monitor for updates.

CVE-2000-0720

The vulnerability CVE-2000-0720 affects GWScripts News Publisher (news.cgi and the new.cgi author-adding path). The root cause is improper authentication on author-adding requests, enabling a remote attacker to add new authors by posting to new.cgi with an addAuthor parameter while setting the Re...

CVE-2000-0504

CVE-2000-0504 affects the XFree86 suite, specifically the libICE component. The issue arises when processing an unvalidated, large value in the SKIP_STRING macro, allowing remote attackers to cause a denial of service. The available documents identify the vulnerable software as libICE in XFree86 ...

CVE-2000-0856

Consolidated evidence shows SunFTP Buffer Overflow (CVE-2000-0856) affecting SunFTP build 9(1). The vulnerability arises from improper handling of long GET requests, enabling a remote attacker to cause a denial of service or potentially execute arbitrary commands by sending more than about 2100 c...

CVE-2000-1124

The CVE-2000-1124 entry describes a local privilege-escalation flaw in IBM AIX 4.3.x: a buffer overflow in the piobe command caused by long environmental variables. The affected component is the piobe command on IBM AIX 4.3.x; the underlying issue is a buffer overflow allowing local users to gain...

CVE-2000-1165

Balabit syslog-ng is affected by CVE-2000-1165 due to a parsing error in messages that lack a closing > in the priority specifier, allowing remote attackers to cause an application crash (DoS). The available records identify the affected software as Balabit syslog-ng and describe the issue as ...

CVE-2000-1109

CVE-2000-1109 affects Midnight Commander (mc) versions up to 4.x, specifically 4.5.51 and earlier. The issue arises when mc processes malformed directory names during directory opening, allowing a local user to gain privileges by creating directories that contain special characters followed by co...

CVE-2000-1180

The CVE-2000-1180 entry describes a buffer overflow in the cmctl utility of Oracle 8.1.5 Connection Manager Control. The vulnerability is triggered by a long command line argument, allowing local attackers to gain privileges (local privilege escalation). The available sources describe the affecte...

CVE-2000-0829

The affected software is the tmpwatch utility in Red Hat Linux. The vulnerability arises because it forks a new process for each directory level when scanning /tmp or /var/tmp , enabling a local attacker to create deeply nested directories and trigger a denial of service . Exploitation details ar...

CVE-2000-0896

WatchGuard SOHO Firewall is affected by CVE-2000-0896 via Fragmented IP Packet Attack. A flood of fragmented IP packets exhausts the device’s resources, causing it to stop forwarding packets and drop connections. ISS/X-Force notes remote exploitation could crash the configuration server or deny s...

CVE-2000-0818

The CVE-2000-0818 issue affects Oracle Listener (tnslsnr) in default installations of versions 7.3.4, 8.0.6, and 8.1.6, allowing an attacker to log data to arbitrary files and execute commands through SET TRC_FILE or SET LOG_FILE. The provided documents indicate the vulnerability enables modifica...

CVE-2000-0693

The CVE affects pgxconfig in the Raptor GFX configuration tool, where a relative path is used for a system call to the cp program. This enables local users to execute arbitrary commands by manipulating their PATH to point to a malicious cp replacement. Root cause: path-based command execution via...

CVE-2000-0694

CVE-2000-0694 concerns the pgxconfig component of the Raptor GFX configuration tool. The vulnerability arises from a symlink attack that enables local users to gain privileges. The available documents identify the affected software as the Raptor GFX configuration tool’s pgxconfig and describe a l...

CVE-2000-0854

CVE-2000-0854 affects Microsoft Office 2000 documents. The vulnerability arises because the document’s directory is used to locate DLLs (e.g., riched20.dll, msi.dll); an attacker could place a Trojan Horse DLL in the same directory to execute arbitrary commands. The connected sources confirm the ...

CVE-2000-0314

CVE-2000-0314 affects NetBSD 1.3.3 and Linux where traceroute with a large waittime (-w) is not parsed correctly, causing the time delay for sending packets to be zero. This can enable local users to flood other systems. The description covers the affected vectors and impact as stated; no explici...

CVE-2000-0309

Public technical details about CVE-2000-0309 are not provided in the connected documents. The initial entry notes a local DoS in OpenBSD 2.4 with DDB, but no further technical specifics or fixes are included here. Monitor for updates.

CVE-2000-0742

The CVE-2000-0742 entry concerns the IPX protocol implementation in Microsoft Windows 95 and Windows 98. The vulnerability allows remote attackers to cause a denial of service by sending a ping packet with a source IP address that is a broadcast address (the “Malformed IPX Ping Packet” issue). Th...

CVE-2000-0351

The vulnerability CVE-2000-0351 affects SCO UnixWare 7.1.0 packaging commands that grant insecure privileges, enabling local users to add or remove software packages. Connected sources (NVD, CVE List, CVE record, EUVD) corroborate that this is a local-privilege issue impacting the packaging subsy...

CVE-2000-1174

CVE-2000-1174 affects Ethereal (now Wireshark) up to version 0.8.13 and earlier, where multiple buffer overflows in the AFS ACL parser allow remote attackers to execute arbitrary commands by sending a crafted packet with a long username. The flaw is in the parser’s handling of AFS ACL data, enabl...