CVE-2000-0314

CVE-2000-0314 affects NetBSD 1.3.3 and Linux where traceroute with a large waittime (-w) is not parsed correctly, causing the time delay for sending packets to be zero. This can enable local users to flood other systems. The description covers the affected vectors and impact as stated; no explici...

CVE-2000-0309

Public technical details about CVE-2000-0309 are not provided in the connected documents. The initial entry notes a local DoS in OpenBSD 2.4 with DDB, but no further technical specifics or fixes are included here. Monitor for updates.

CVE-2000-0742

The CVE-2000-0742 entry concerns the IPX protocol implementation in Microsoft Windows 95 and Windows 98. The vulnerability allows remote attackers to cause a denial of service by sending a ping packet with a source IP address that is a broadcast address (the “Malformed IPX Ping Packet” issue). Th...

CVE-2000-0351

The vulnerability CVE-2000-0351 affects SCO UnixWare 7.1.0 packaging commands that grant insecure privileges, enabling local users to add or remove software packages. Connected sources (NVD, CVE List, CVE record, EUVD) corroborate that this is a local-privilege issue impacting the packaging subsy...

CVE-2000-1174

CVE-2000-1174 affects Ethereal (now Wireshark) up to version 0.8.13 and earlier, where multiple buffer overflows in the AFS ACL parser allow remote attackers to execute arbitrary commands by sending a crafted packet with a long username. The flaw is in the parser’s handling of AFS ACL data, enabl...

CVE-2000-0573

The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to execute arbitrary commands via the SITE EXEC command...

CVE-2000-0541

The Panda Antivirus console on port 2001 allows local users to execute arbitrary commands without authentication via the CMD command...

CVE-2000-0890

CVE-2000-0890 is a race-condition vulnerability affecting the FreeBSD periodic script (and possibly other systems) that allows a local user to overwrite arbitrary files via symlink manipulation of temporary files named like /tmp/periodic.*_$PID. The issue arises because periodic creates predictab...

CVE-2000-0302

Microsoft Index Server WebHits ISAPI filter vulnerability (MS00-06) allows remote attackers to disclose ASP source by requesting null.htw with a crafted CiWebHitsFile argument (via %20). Connected OpenVAS entries describe the WebHits component’s information disclosure and path/file reading issues...

CVE-2000-0856

Buffer overflow in SunFTP build 91 allows remote attackers to cause a denial of service or possibly execute arbitrary commands via a long GET request...

CVE-2000-0650

The default installation of VirusScan 4.5 and NetShield 4.5 has insecure permissions for the registry key that identifies the AutoUpgrade directory, which allows local users to execute arbitrary commands by replacing SETUP.EXE in that directory with a Trojan Horse...

Microsoft Windows Server 2000 SP1SP2 - isapi .printer Extension Overflow (1)

Microsoft Windows Server 2000 SP1SP2 - isapi .printer Extension Overflow 1 / iishack 2000 - eEye Digital Security - 2001 This affects all unpatched windows 2000 machines with the .printer isapi filter loaded. This is purely proof of concept. Quick rundown of the exploit: Eip overruns at position...

Microsoft Windows Server 2000 SP1/SP2 - isapi .printer Extension Overflow (1)

/ iishack 2000 - eEye Digital Security - 2001 This affects all unpatched windows 2000 machines with the .printer isapi filter loaded. This is purely proof of concept. Quick rundown of the exploit: Eip overruns at position 260 i have 19 bytes of code to jump back to the beginning of the buffer. an...

CVE-2001-0003: Undefined Security Weakness

Web Extender Client WEC in Microsoft Office 2000, Windows 2000, and Windows Me does not properly process Internet Explorer security settings for NTLM authentication, which allows attackers to obtain NTLM credentials and possibly obtain the password, aka the "Web Client NTLM Authentication"...

CVE-2001-0005: Undefined Security Weakness

Buffer overflow in the parsing mechanism of the file loader in Microsoft PowerPoint 2000 allows attackers to execute arbitrary commands...

CVE-2000-0349: Undefined Security Weakness

Vulnerability in the passthru driver in SCO UnixWare 7.1.0 allows an attacker to cause a denial of service...

CVE-2001-0015: Undefined Security Weakness

Network Dynamic Data Exchange DDE in Windows 2000 allows local users to gain SYSTEM privileges via a "WMCOPYDATA" message to an invisible window that is running with the privileges of the WINLOGON process...

CVE-2001-0147: Undefined Security Weakness

Buffer overflow in Windows 2000 event viewer snap-in allows attackers to execute arbitrary commands via a malformed field that is improperly handled during the detailed view of event records...

CVE-2000-0854: Undefined Security Weakness

When a Microsoft Office 2000 document is launched, the directory of that document is first used to locate DLL's such as riched20.dll and msi.dll, which could allow an attacker to execute arbitrary commands by inserting a Trojan Horse DLL into the same directory as the document...

CVE-2001-0014: Undefined Security Weakness

Remote Data Protocol RDP in Windows 2000 Terminal Service does not properly handle certain malformed packets, which allows remote attackers to cause a denial of service, aka the "Invalid RDP Data" vulnerability...