CVE-2000-0804

The vulnerability CVE-2000-0804 affects Check Point VPN-1/FireWall-1 4.1 and earlier. It is caused by a flaw in handling fragmented TCP connection requests or reopening closed one-way connections, allowing remote attackers to bypass the directionality check (One-way Connection Enforcement Bypass)...

CVE-2000-0915

The CVE-2000-0915 issue affects the FreeBSD finger daemon on version 4.1.1, where a remote attacker can read arbitrary files by specifying the target file name instead of a user name (e.g., finger /etc/passwd@target). The root cause is improper handling of the file-path argument by fingerd, enabl...

CVE-2000-0834

The Windows 2000 telnet client attempts to perform NTLM authentication by default, which allows remote attackers to capture and replay the NTLM challenge/response via a telnet:// URL that points to the malicious server, aka the "Windows 2000 Telnet Client NTLM Authentication" vulnerability...

CVE-2000-0883

The CVE-2000-0883 entry concerns Mandrake Linux mod_perl on Apache where the default mod_perl configuration (Mandrake 6.1–7.1) sets the /perl/ directory to be browseable, allowing remote listing of that directory. The vulnerability arises from an insecure Options directive that permits directory ...

CVE-2000-0048

The CVE-2000-0048 entry involves the get_it program in Corel Linux Update. The vulnerability arises from insufficient validation of a user-supplied PATH, allowing local users to influence which cp binary is executed, leading to local root privilege escalation. Impact is described as local root ac...

CVE-2000-0716

WorldClient email client in MDaemon 2.8 includes the session ID in the referer field of an HTTP request when the user clicks on a URL, which allows the visited web site to hijack the session ID and read the user's email...

CVE-2000-0973

CVE-2000-0973 affects curl before 6.0-1.1 and curl-ssl before 6.0-1.2. A buffer overflow occurs when generating a long error message, allowing remote attackers to execute arbitrary commands. Root cause: unchecked length in error handling. Connected sources (OSV, CVE records) confirm the overflow ...

CVE-2000-0679

The CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server to force the client to create arbitrary files...

CVE-2000-0849

Race condition in Microsoft Windows Media server allows remote attackers to cause a denial of service in the Windows Media Unicast Service via a malformed request, aka the "Unicast Service Race Condition" vulnerability...

CVE-2000-1042

CVE-2000-1042 affects Mandrake Linux (ypserv/ypbind). A buffer overflow in ypserv (and a DoS/format/buffer issue in ypbind) can allow an attacker to gain root privileges when ypserv is built without vsyslog(). Affects Mandrake 7.1 and earlier; MDKSA-2000:064 notes vulnerable components and recomm...

CVE-2000-1071

Technical details (affected product, root cause, impact, and fix) are not publicly available in the provided documents. Monitor official CVE records and vendor advisories for updates.

CVE-2000-1106

Trend Micro InterScan VirusWall creates an Intscan share to the InterScan directory granting Full Control to the Everyone group, enabling attackers to modify VirusWall programs by altering permissions. The shared-access vulnerability is described in CVE-2000-1106 with a CVSS v2 base score of 4.6 ...

CVE-2000-1034

The CVE relates to a buffer overflow in the Windows 2000 System Monitor ActiveX control (sysmon.ocx). The vulnerability allows remote code execution by crafting a malicious LogFileName value in HTML/scripted content, permitting exploitation by a user who can load the affected page or message. The...

CVE-2000-0738

The CVE-2000-0738 entry maps to a concrete issue in WebShield SMTP 4.5 where a From: header ending in a dot triggers the product to repeatedly send copies of the same email, causing a denial of service via email flood. The vulnerability is rooted in the mail-handling logic that mishandles such he...

CVE-2000-0992

Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. dot dot attack...

CVE-2000-1132

The CVE-2000-1132 entry concerns the DCForum cgforum.cgi CGI script, where a malformed forum variable allows remote attackers to read arbitrary files and to delete the script itself. This describes improper input validation in the CGI handling leading to arbitrary file read and self-deletion. No ...

CVE-2000-0948

GnoRPM before 0.95 allows local users to modify arbitrary files via a symlink attack...

CVE-2000-0862

The vulnerability CVE-2000-0862 affects the Allaire Spectra 1.0.1 product, specifically its administrative interface utility. The exposed issue allows remote attackers to read and modify sensitive configuration information. The NVD entry lists a CVSS v2 base score of 6.4 (Medium) with network acc...

CVE-2000-1000

Format string vulnerability in AOL Instant Messenger AIM 4.1.2010 allows remote attackers to cause a denial of service and possibly execute arbitrary commands by transferring a file whose name includes format characters...

CVE-2000-0850

Netegrity SiteMinder before 4.11 allows remote attackers to bypass its authentication mechanism by appending "$/FILENAME.ext" where ext is .ccc, .class, or .jpg to the requested URL...