CVE-2000-0842

CVE-2000-0842 affects the UnixWare 7 scohelphttp webserver. The vulnerability is in the search97cgi/vtopic component, where a path traversal via a .. (dot dot) attack could allow remote attackers to read arbitrary files. The available connected sources (NVD, CVE listings) confirm the affected pro...

CVE-2000-0828

CVE-2000-0828 describes a buffer overflow in Mobius DocumentDirect for the Internet 1.2 ’s ddicgi.exe . An attacker can trigger arbitrary command execution by sending a specially long User-Agent header, i.e., a remote code execution vulnerability. The entry lists a network attack vector with a hi...

CVE-2000-0833

Buffer overflow in WinSMTP 1.06f and 2.X allows remote attackers to cause a denial of service via a long 1 USER or 2 HELO command...

CVE-2000-0843

Buffer overflow in pamsmb and pamntdom pluggable authentication modules PAM allow remote attackers to execute arbitrary commands via a login with a long user name...

Hilgraeve HyperTerminal 6.0 - Telnet Buffer Overflow

source: https://www.securityfocus.com/bid/1815/info Hilgraeve HyperTerminal is a communications/telnet application shipped and installed with every copy of Microsoft Windows 98, ME, NT 4.0, and 2000. It is the default telnet client in Microsoft 98 and ME but not in Windows NT 4.0 / 2000. A buffer...

Microsoft Security Bulletin (MS00-078)

Microsoft Security Bulletin MS00-078 - -------------------------------------- Patch Available for "Web Server Folder Traversal" Vulnerability Originally posted: October 17, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr IIS 4.0 and 5.0...

Security issue with Compaq Easy Access Keyboard software

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Compaq's Easy Access Keyboard software version 1.3 contains a bug which could allow a privilege escalation on the local machine or domain. I have confirmed the bug running the Easy Access Keyboard software on Windows 2000 Professional SP1, but I suspe...

Security Bulletin (MS00-077)

Microsoft Security Bulletin MS00-077 - -------------------------------------- Patch Available for "NetMeeting Desktop Sharing" Vulnerability Originally posted: October 13, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in NetMeeting, an application th...

CVE-2000-0477

Buffer overflow in Norton Antivirus for Exchange NavExchange allows remote attackers to cause a denial of service via a .zip file that contains long file names...

CVE-2000-0301

Ipswitch IMAIL server 6.02 and earlier allows remote attackers to cause a denial of service via the AUTH CRAM-MD5 command...

CVE-2000-0469

Selena Sol WebBanner 4.0 allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2000-0728

xpdf PDF viewer client earlier than 0.91 allows local users to overwrite arbitrary files via a symlink attack...

CVE-2000-0635

The viewpage.html sample page in the MiniVend shopping cart program allows remote attackers to execute arbitrary commands via shell metacharacters...

CVE-2000-0128

The Finger Server 0.82 allows remote attackers to execute commands via shell metacharacters...

CVE-2000-0737

The Service Control Manager SCM in Windows 2000 creates predictable named pipes, which allows a local user with console access to gain administrator privileges, aka the "Service Control Manager Named Pipe Impersonation" vulnerability...

CVE-2000-0237

Netscape Enterprise Server with Web Publishing enabled allows remote attackers to list arbitrary directories via a GET request for the /publisher directory, which provides a Java applet that allows the attacker to browse the directories...

CVE-2000-0332

UltraBoard.pl or UltraBoard.cgi CGI scripts in UltraBoard 1.6 allows remote attackers to read arbitrary files via a pathname string that includes a dot dot .. and ends with a null byte...

CVE-2000-0191

Axis StorPoint CD allows remote attackers to access administrator URLs without authentication via a .. dot dot attack...

CVE-2000-0486

Buffer overflow in Cisco TACACS+ tacplus server allows remote attackers to cause a denial of service via a malformed packet with a long length field...

CVE-2000-0754

Technical details about CVE-2000-0754 are not publicly provided in the supplied documents; no affected versions, exploitation details, or fixes are stated. Monitor for updates from NVD/CVE feeds.