CVE-2000-0716

WorldClient email client in MDaemon 2.8 includes the session ID in the referer field of an HTTP request when the user clicks on a URL, which allows the visited web site to hijack the session ID and read the user's email...

CVE-2000-0792

Gnome Lokkit firewall package before 0.41 does not properly restrict access to some ports, even if a user does not make any services available...

CVE-2000-0756

Microsoft Outlook 2000 does not properly process long or malformed fields in vCard .vcf files, which allows attackers to cause a denial of service...

CVE-2000-0359

Buffer overflow in Trivial HTTP THTTPd allows remote attackers to cause a denial of service or execute arbitrary commands via a long If-Modified-Since header...

CVE-2000-0692

ISS RealSecure 3.2.1 and 3.2.2 allows remote attackers to cause a denial of service via a flood of fragmented packets with the SYN flag set...

CVE-2000-0682

BEA WebLogic 5.1.x allows remote attackers to read source code for parsed pages by inserting /ConsoleHelp/ into the URL, which invokes the FileServlet...

CVE-2000-0760

The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp extension...

CVE-2000-0711

Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which allows remote attackers to create a server on the victim's system via a malicious applet, as demonstrated by Brown Orifice...

CVE-2000-0360

Buffer overflow in INN 2.2.1 and earlier allows remote attackers to cause a denial of service via a maliciously formatted article...

CVE-2000-0855

SunFTP build 91 allows remote attackers to cause a denial of service by connecting to the server and disconnecting before sending a newline...

CVE-2000-0866

Interbase 6 SuperServer for Linux allows an attacker to cause a denial of service via a query containing 0 bytes...

CVE-2000-1214

Buffer overflows in the 1 outpack or 2 buf variables of ping in iputils before 20001010, as distributed on Red Hat Linux 6.2 through 7J and other operating systems, may allow local users to gain privileges...

CVE-2000-0882

CVE-2000-0882 affects Intel Express 500 series switches. The vulnerability allows a remote attacker to trigger a Denial of Service by sending a malformed ICMP packet, causing the switch CPU to crash. The available sources (NVD/NIST CVE listing) confirm the affected product and impact as described...

CVE-2000-0881

The dccscan setuid program in LPPlus does not properly check if the user has the permissions to print the file that is specified to dccscan, which allows local users to print arbitrary files...

CVE-2000-0827

This CVE (CVE-2000-0827) documents a buffer overflow in the web authorization form of Mobius DocumentDirect for the Internet 1.2. The vulnerability is triggered by a long username and could lead to denial of service or arbitrary command execution. The connected documents corroborate the affected ...

CVE-2000-0840

XMail POP3 server (versions before 0.59) is vulnerable to a buffer overflow triggered by a long USER argument. The issue can allow an attacker to remotely execute commands on the affected host, with reports indicating possible code execution as root. The vulnerability is tied to the APOP/USER han...

CVE-2000-0872

CVE-2000-0872 affects PhotoAlbum 0.9.9. The vulnerability is a path traversal in explorer.php that allows remote attackers to read arbitrary files via a .. (dot dot) sequence. This is a direct file-disclosure issue, enabling access to non-public data on the server where PhotoAlbum is hosted. The ...

CVE-2000-0835

The CVE-2000-0835 issue affects Sambar Server 4.4 Beta 3 where the search.dll ISAPI Search utility allows remote reading of arbitrary directories by supplying a directory path in the query parameter. This causes information disclosure (confidentiality impact) without integrity or availability dis...

CVE-2000-0841

XMail POP3 server is vulnerable to a buffer overflow in the APOP command when processing long inputs, affecting versions before 0.59. This can allow a remote attacker to execute arbitrary commands (with some sources noting potential root-level impact). The connected documents provide vulnerabilit...

CVE-2000-0812

The CVE-2000-0812 entry concerns Sun Java Web Server; the admin module is vulnerable to remote code execution. An attacker can upload Java code to the module and trigger the com.sun.server.http.pagecompile.jsp92.JspServlet by requesting a URL starting with /servlet/, enabling execution of arbitra...