CVE-2000-0850

Netegrity SiteMinder before 4.11 allows remote attackers to bypass its authentication mechanism by appending "$/FILENAME.ext" where ext is .ccc, .class, or .jpg to the requested URL...

CVE-2000-0925

The CVE-2000-0925 entry concerns SmartWin CyberOffice Shopping Cart 2 (CyberShop). The available documents state that the default installation creates a _private directory with world-readable permissions, which allows remote attackers to obtain sensitive information. No further technical specific...

CVE-2000-0990

Technical details about CVE-2000-0990 (affected software, root cause, impact, fixes) are not publicly available in the provided connected documents. Monitor for updates.

CVE-2000-0738

WebShield SMTP 4.5 allows remote attackers to cause a denial of service by sending e-mail with a From: address that has a . period at the end, which causes WebShield to continuously send itself copies of the e-mail...

CVE-2000-1149

The CVE-2000-1149 issue affects Microsoft Windows NT 4.0 Terminal Server, where a buffer overflow in RegAPI.DLL allows remote code execution via a specially crafted username. The vulnerability can be exploited by anyone with access to port 3389/TCP and could grant the attacker the privileges of a...

CVE-2000-0809

The vulnerability CVE-2000-0809 is a buffer overflow in the GetKey routine of the inter-module communication protocol checker (Getkey) in Check Point VPN-1/FireWall-1 4.1 and earlier. This flaw allows remote attackers to crash the firewall daemon, leaving policy enforcement in place but potential...

CVE-2000-1099

Java Runtime Environment in Java Development Kit JDK 1.2.205 and earlier can allow an untrusted Java class to call into a disallowed class, which could allow an attacker to escape the Java sandbox and conduct unauthorized activities...

CVE-2000-0851

Buffer overflow in the Still Image Service in Windows 2000 allows local users to gain additional privileges via a long WMUSER message, aka the "Still Image Service Privilege Escalation" vulnerability...

CVE-2000-0848

CVE-2000-0848 describes a buffer overflow in IBM WebSphere Application Server (WAS) that allows remote attackers to execute arbitrary commands via a long Host header in HTTP requests. The vulnerability is tied to the server’s handling of the Host: header, leading to potential remote code executio...

CVE-2000-1014

The CVE-2000-1014 entry concerns a format string vulnerability in the search97.cgi CGI script of the SCO help HTTP server for Unixware 7 . The flaw allows remote attackers to execute arbitrary commands through format string characters supplied in the queryText parameter, enabling potential remote...

CVE-2000-0912

MultiHTML CGI script allows remote attackers to read arbitrary files and possibly execute arbitrary commands by specifying the file name to the "multi" parameter...

CVE-2000-1140

Recourse ManTrap 1.6 does not properly hide processes from attackers, which could allow attackers to determine that they are in a honeypot system by comparing the results from kill commands with the process listing in the /proc filesystem...

CVE-2000-1141

Recourse ManTrap 1.6 modifies the kernel so that ".." does not appear in the /proc listing, which allows attackers to determine that they are in a honeypot system...

CVE-2000-1142

Recourse ManTrap 1.6 generates an error when an attacker cd's to /proc/self/cwd and executes the pwd command, which allows attackers to determine that they are in a honeypot system...

CVE-2000-0824

The CVE-2000-0824 issue involves glibc 2.1.1 unsetenv(): when a variable appears twice in the environment, the value may not be properly removed, enabling a local attacker to influence setuid programs with duplicate variables (e.g., LD_PRELOAD, LD_LIBRARY_PATH) and potentially execute code as roo...

CVE-2000-0991

Buffer overflow in Hilgraeve, Inc. HyperTerminal client on Windows 98, ME, and 2000 allows remote attackers to execute arbitrary commands via a long telnet URL, aka the "HyperTerminal Buffer Overflow" vulnerability...

CVE-2000-1182

The CVE-2000-1182 entry involves WatchGuard Firebox II where a remote attacker can cause a denial of service by flooding the device with a large volume of FTP or SMTP requests, resulting in disabled proxy handling. The vulnerability affects Firebox II’s proxy functionality under network-traffic c...

CVE-2000-1072

CVE-2000-1072 affects iCal 2.1 Patch 2 where multiple files are installed with world-writable permissions. This allows a local user to modify the iCal configuration and, by replacing the iplncal.sh program with a Trojan horse, execute arbitrary commands. The underlying issue is improper permissio...

CVE-2000-1055

Buffer overflow in CiscoSecure ACS Server 2.42 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a large TACACS+ packet...

CVE-2000-1055

CVE-2000-1055 corresponds to a buffer overflow in CiscoSecure ACS Server 2.4(2) and earlier. The vulnerability can be triggered by processing a large TACACS+ packet, enabling remote attackers to cause a denial of service and potentially execute arbitrary commands. The linked sources (NVD, CVE rec...