8799 matches found
CVE-2000-0283
The vulnerability CVE-2000-0283 affects IRIX Performance Copilot (pmcd daemon). In default installations, remote attackers could access sensitive system information via pmcd, leading to partial confidentiality impact. The issue is tied to the service exposing data; the documented remediation is t...
CVE-2000-1014
Format string vulnerability in the search97.cgi CGI script in SCO help http server for Unixware 7 allows remote attackers to execute arbitrary commands via format characters in the queryText parameter...
CVE-2000-0837
FTP Serv-U 2.5e allows remote attackers to cause a denial of service by sending a large number of null bytes...
CVE-2000-1022
CVE-2000-1022 concerns the mailguard feature in Cisco Secure PIX Firewall (versions 5.2(2) and earlier). The defect allows bypass of SMTP command restrictions by issuing a DATA command before restricted SMTP commands, enabling remote attackers to interact with the SMTP daemon in ways not intended...
CVE-2000-0498
The CVE-2000-0498 vulnerability affects Unify eWave ServletExec. A remote attacker could view the source code of a JSP program by requesting a URL that uses the JSP extension in uppercase. Connected sources confirm the affected product and the exact attack vector; PT-2000-1436 notes no informatio...
CVE-2000-1189
Buffer overflow in pamlocaluser PAM module in Red Hat Linux 7.x and 6.x allows attackers to gain privileges...
CVE-2000-1163
CVE-2000-1163 affects Ghostscript prior to 5.10-16, which uses an insecure LD_RUN_PATH value to locate libraries in the current directory. This enables a local attacker to place a Trojan horse library in a directory from which another user runs Ghostscript, potentially executing code with the use...
CVE-2000-0980
This CVE concerns the NMPI listener component of Microsoft NWLink. The affected element is the NMPI (Name Management Protocol on IPX) listener in NWLink, which fails to properly filter packets originating from a broadcast address. Under this flaw, remote attackers can trigger a broadcast storm an...
CVE-2000-0884
Microsoft IIS 4.0 and 5.0 are vulnerable to a directory traversal vulnerability (also known as
CVE-2000-1143
Recourse ManTrap 1.6 hides the first 4 processes that run on a Solaris system, which allows attackers to determine that they are in a honeypot system...
CVE-2000-0887
ISC BIND 8.2.x before 8.2.2-P7 is vulnerable to a remote denial‑of‑service via a compressed ZXFR zone transfer and a subsequent non‑cached authoritative query (the zxfr bug). An attacker permitted to perform zone transfers can crash the named daemon, disrupting DNS resolution. A patch to BIND 8.2...
CVE-2000-1115
The CVE-2000-1115 flaw affects the 602Pro LAN SUITE remote web administration component (webprox.dll) and is caused by a buffer overflow that can be triggered by a long GET request. Impact per available data includes denial of service and potential arbitrary command execution, with partial impact...
CVE-2000-0716
CVE-2000-0716 affects WorldClient email client in MDaemon 2.8. The session ID is included in the referer header of an HTTP request when the user clicks a URL, allowing the visited site to hijack the session ID and read the user’s email. Exploitation details are not provided in the documents, and ...
CVE-2000-0992
CVE-2000-0992 is linked to a directory traversal vulnerability in scp for OpenSSH, with the SUSE page noting OpenSSH before 3.4p1 and that this may be a rediscovery of CVE-2000-0992. The connected documents do not provide full technical details (exact affected versions, root cause specifics, or a...
CVE-2000-0864
Race condition in the creation of a Unix domain socket in GNOME esound 0.2.19 and earlier allows a local user to change the permissions of arbitrary files and directories, and gain additional privileges, via a symlink attack...
CVE-2000-0926
SmartWin CyberOffice Shopping Cart 2 aka CyberShop allows remote attackers to modify price information by changing the "Price" hidden form variable...
CVE-2000-0488
Buffer overflow in ITHouse mail server 1.04 allows remote attackers to execute arbitrary commands via a long RCPT TO mail command...
CVE-2000-0969
CVE-2000-0969 affects the Half-Life dedicated server (build 3104 and earlier). The issue is a format-string vulnerability in the changelevel command that can allow remote code execution via the system console or rcon. The vulnerability arises from unsafely handling format strings in the server, e...