7988 matches found
CVE-2000-0585
ISC DHCP client program dhclient allows remote attackers to execute arbitrary commands via shell metacharacters...
CVE-2000-0768
A function in Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read client files, aka a variant of the "Frame Domain Verification" vulnerability...
CVE-2000-0378
The pamconsole PAM module in Linux systems performs a chown on various devices upon a user login, but an open file descriptor for those devices can be maintained after the user logs out, which allows that user to sniff activity on these devices when subsequent users log in...
CVE-2000-0613
Cisco Secure PIX Firewall does not properly identify forged TCP Reset RST packets, which allows remote attackers to force the firewall to close legitimate connections...
CVE-2000-0792
Gnome Lokkit firewall package before 0.41 does not properly restrict access to some ports, even if a user does not make any services available...
CVE-2000-0727
CVE-2000-0727 affects the xpdf PDF viewer client older than 0.91. The flaw: when handling embedded URLs, the client does not correctly launch a web browser, enabling an attacker to execute arbitrary commands via a URL containing shell metacharacters. NVD assigns a base CVSS v2.0 score of 7.6 (HIG...
CVE-2000-0263
CVE-2000-0263 affects the X font server (xfs) on Red Hat Linux 6.x. A malformed request can cause a denial of service, impacting availability (CVSS v2 base score 2.1). Vector: local, low complexity, no authentication required; impact is limited to availability. No explicit remediation details are...
CVE-2000-0558
HP OpenView Network Node Manager 6.1 is affected by a buffer overflow in the Alarm service (OVALARMSRV) that listens on port 2345, enabling remote command execution. The vulnerability stems from a buffer overflow condition in the OVALARMSRV handling path. The available sources confirm the affecte...
CVE-2000-0602
CVE-2000-0602 affects Secure Locate (slocate) in Red Hat Linux. Local users can gain privileges through a malformed configuration file referenced by the LOCATE_PATH environment variable, due to improper handling of the config file. The CVSS base score is 4.6 (Medium) with local attack vector and ...
CVE-2000-0712
CVE-2000-0712 affects Linux Intrusion Detection System (LIDS) 0.9.7. The issue allows local users to gain root privileges when LIDS is disabled via the security=0 boot option. The provided documents state the affected component and the condition that enables elevation but do not include explicit ...
CVE-2000-0497
The CVE-2000-0497 issue affects IBM WebSphere server 3.0.2, where a remote attacker can view the source code of a JSP program by requesting a URL that serves a JSP extension in upper case. The root cause is case-insensitive handling of JSP extensions, allowing source disclosure over the network. ...
CVE-2000-0478
Norton Antivirus for Exchange (NavExchange) can enter a fail-open state, causing antivirus checks to fail and allowing viruses to pass through the server. The vulnerability, CVE-2000-0478, is documented across CVE/NVD records with a MEDIUM base score on CVSS v2 (AV:N/AC:L/Au:N/C:N/I:P/A:N). The c...
CVE-2000-0744
This CVE entry is rejected and not used; reference CVE-2000-0743 instead.
CVE-2000-0561
The CVE-2000-0561 entry describes a buffer overflow in WebBBS 1.15 that allows remote attackers to execute arbitrary commands via a long HTTP GET request. Affected software is WebBBS 1.15; root cause is a buffer overflow triggered by oversized HTTP requests. Impact is indicated as partial confide...
CVE-2000-0447
CVE-2000-0447 describes a buffer overflow in WebShield SMTP 4.5.44’s remote management service. A long configuration parameter passed to the WebShield remote management interface can lead to remote command execution. The vulnerability is triggered via the management/config parameter (remote servi...
CVE-2000-0127
CVE-2000-0127 affects Webspeed: the configuration program fails to disable access to the WSMadmin utility, enabling remote attackers to gain privileges via wsisa.dll. The vulnerability is triggered by unauthenticated access to the WSMadmin component, potentially allowing an attacker to take contr...
CVE-2000-0237
CVE-2000-0237 affects Netscape Enterprise Server with Web Publishing enabled. A GET request to the /publisher directory serves a Java applet that allows remote attackers to list arbitrary directories, enabling directory browsing and potential exposure of server contents. The provided documents do...
CVE-2000-0550
CVE-2000-0550 concerns Kerberos 4 KDC memory handling. The vulnerability is a double-free of memory in the Kerberos 4 KDC, enabling a remote attacker to cause a denial of service . The affected component is the Kerberos 4 KDC program; root cause is improper memory deallocation leading to potentia...