CVE-2000-0836

Buffer overflow in CamShot WebCam Trial2.6 allows remote attackers to execute arbitrary commands via a long Authorization header...

CVE-2000-0843

Summary (CVE-2000-0843): Buffer overflow in pam_smb and pam_ntdom PAM modules can be triggered by a long username, enabling remote attackers to execute arbitrary commands. Connected Nessus data notes the overflow could allow an intruder to run arbitrary commands as root on the host, indicating a ...

CVE-2000-0836

CVE-2000-0836 affects CamShot WebCam Trial2.6. The vulnerability is a buffer overflow in the Authorization header that allows remote attackers to execute arbitrary commands. The CVSS metrics indicate a network, low complexity, no authentication requirement, with partial impact on confidentiality,...

CVE-2000-0828

Buffer overflow in ddicgi.exe in Mobius DocumentDirect for the Internet 1.2 allows remote attackers to execute arbitrary commands via a long User-Agent parameter...

CVE-2000-0879

CVE-2000-0879: LPPlus programs dccsched, dcclpdser, dccbkst, dccshut, dcclpdshut, and dccbkstshut are installed setuid root and world‑executable, which allows arbitrary local users to start and stop various LPD services. The provided documents do not include exploitation details or remediation in...

CVE-2000-0845

CVE-2000-0845 affects Digital Unix 4.0F: the kdebugd daemon allows remote attackers to read arbitrary files by specifying the full path in the initialization packet. Exploitation status and remediation details are not provided in the supplied documents.

CVE-2000-1213

ping in iputils before 20001010, as distributed on Red Hat Linux 6.2 through 7J and other operating systems, does not drop privileges after acquiring a raw socket, which increases ping's exposure to bugs that otherwise would occur at lower privileges...

CVE-2000-0831

The CVE-2000-0831 entry describes a buffer overflow in Fastream FTP++ 2.0 triggered by a long username, allowing remote denial of service and possibly arbitrary command execution. The vulnerability affects the FTP++ 2.0 server’s username handling logic, with the impact stated as partial confident...

CVE-2000-0866

Interbase 6 SuperServer for Linux is affected by a denial of service vulnerability triggered by a query containing 0 bytes. The incident is described as a local attack that can cause availability impact without requiring authentication or user interaction. The provided documents do not specify a ...

CVE-2000-0833

CVE-2000-0833 affects WinSMTP 1.06f and 2.X, where a buffer overflow can be triggered by long USER or HELO commands, allowing remote attackers to cause a denial of service. The available records confirm the vulnerable components and the attack vectors, with no public details about a patch in the ...

CVE-2000-0857

The CVE concerns muh 2.05d IRC server where the logging capability does not properly cleanse user-injected format strings. Root cause: improper handling of format strings in nicknames, enabling remote attackers to cause a denial of service and potentially execute arbitrary commands through a malf...

CVE-2000-0845

kdebug daemon kdebugd in Digital Unix 4.0F allows remote attackers to read arbitrary files by specifying the full file name in the initialization packet...

CVE-2000-0832

Htgrep CGI program allows remote attackers to read arbitrary files by specifying the full pathname in the hdr parameter...

CVE-2000-0842

The search97cgi/vtopic" in the UnixWare 7 scohelphttp webserver allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2000-0826

Mobius DocumentDirect for the Internet 1.2 is affected by CVE-2000-0826 due to a buffer overflow in ddicgi.exe. The vulnerability enables a remote attacker to execute arbitrary commands by sending a long GET request to the web server hosting ddicgi.exe. OpenVAS/Nessus entries confirm the existenc...

CVE-2000-0832

CVE-2000-0832 affects the htgrep CGI script. The issue is an information-disclosure vulnerability: remote attackers can read arbitrary files by supplying a full pathname in the hdr parameter via the web server, exposing sensitive data. The vulnerability is exploitable over network through the htg...

CVE-2000-0872

explorer.php in PhotoAlbum 0.9.9 allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2000-0855

SunFTP build 9(1) is affected by a denial-of-service vulnerability: remote attackers can cause a crash or service disruption by connecting to the server and disconnecting before sending a newline. The CVE entry provides the basic impact and trigger, but there are no additional details in the conn...

CVE-2000-0881

The CVE-2000-0881 issue affects the LPPlus dccscan setuid program. The root cause is insufficient permission checks to verify a user’s authorization to print the target file, enabling local users to print arbitrary files. This is a local-privilege/authorization bypass scenario with potential info...

CVE-2000-0880

The CVE-2000-0880 entry concerns LPPlus creating the lpdprocess file with world-writable permissions, which allows local users to kill arbitrary processes by specifying a process ID and using the setuid dcclpdshut program to terminate the specified process. Impact is local access and partial inte...