CVE-2000-0956

Affected software/impact (CVE-2000-0956): cyrus-sasl prior to 1.5.24 on Red Hat Linux 7.0 may fail to properly verify authorization for a local user, potentially allowing bypass of specified access restrictions. The underlying issue is a flawed authorization check in that version; the baseline CV...

CVE-2000-0341

ATRIUM Cassandra NNTP Server 1.10 allows remote attackers to cause a denial of service via a long login name...

CVE-2000-0908

CVE-2000-0908 refers to BrowseGate proxy vulnerability where HTTP headers that are too long in Authorization or Referer can cause a denial of service and may allow arbitrary code execution. OpenVAS and Tenable Nessus entries describe the flaw as an HTTP header overflow that can crash the proxy or...

CVE-2000-0924

The CVE-2000-0924 entry describes a directory traversal in Armada Master Index’s search.cgi, exploitable via the catigory parameter using .. to read arbitrary files. Affected component: search.cgi. Impact: partial confidentiality loss. Exploit details and patch availability are not provided in th...

CVE-2000-1032

CVE-2000-1032 affects Check Point Firewall-1 4.0 and earlier. The client authentication interface returns distinct error messages for invalid usernames versus invalid passwords, enabling remote attackers to enumerate valid usernames on the firewall. The existing records do not provide concrete de...

CVE-2000-0909

Buffer overflow in the automatic mail checking component of Pine 4.21 and earlier allows remote attackers to execute arbitrary commands via a long From: header...

CVE-2000-0942

The CiWebHitsFile component in Microsoft Indexing Services for Windows 2000 allows remote attackers to conduct a cross site scripting CSS attack via a CiRestriction parameter in a .htw request, aka the "Indexing Services Cross Site Scripting" vulnerability...

CVE-2000-0824

The unsetenv function in glibc 2.1.1 does not properly unset an environmental variable if the variable is provided twice to a program, which could allow local users to execute arbitrary commands in setuid programs by specifying their own duplicate environmental variables such as LDPRELOAD or...

CVE-2000-0967

CVE-2000-0967 affects PHP 3 and PHP 4 where user-supplied format strings are not properly sanitized in error log messages, enabling remote command execution via crafted error output. The vulnerability applies to PHP installations that log errors/warnings (format-string attacks via syslog/vsnprint...

CVE-2000-1120

Buffer overflow in digest command in IBM AIX 4.3.x and earlier allows local users to execute arbitrary commands...

CVE-2000-0962

The IPSEC implementation in OpenBSD 2.7 does not properly handle empty AH/ESP packets, which allows remote attackers to cause a denial of service...

CVE-2000-0847

Buffer overflow in University of Washington c-client library used by pine and other programs allows remote attackers to execute arbitrary commands via a long X-Keywords header...

CVE-2000-1142

CVE-2000-1142 affects Recourse ManTrap 1.6. An attacker who can log in locally and cd into /proc/self/cwd and run pwd triggers an error that discloses that the host is a honeypot. The connected sources confirm the same description without providing additional technical details, such as root cause...

CVE-2000-1184

telnetd in FreeBSD 4.2 and earlier, and possibly other operating systems, allows remote attackers to cause a denial of service by specifying an arbitrary large file in the TERMCAP environmental variable, which consumes resources as the server processes the file...

CVE-2000-0805

CVE-2000-0805 affects Check Point VPN-1/FireWall-1 4.1 and earlier. The issue is "Retransmission of Encapsulated Packets": any source can send specially encapsulated FWZ packets that bypass normal rule checks and anti-spoofing, effectively spoofing as a FWZ client. All versions prior to the relev...

CVE-2000-1056

CiscoSecure ACS Server 2.42 and earlier allows remote attackers to bypass LDAP authentication on the server if the LDAP server allows null passwords...

CVE-2000-0943

CVE-2000-0943 describes a buffer overflow in the bftpd daemon (bftp) version 1.0.11 that can be triggered remotely by a very long USER command. The vulnerability can cause a denial of service and may allow execution of arbitrary commands on the server. Affected product evidence includes Nessus re...

CVE-2000-0984

The Cisco IOS HTTP server (versions 12.0 through 12.1 ) is vulnerable to a denial of service (DoS) attack. If the HTTP management interface is enabled and an attacker sends a request containing a "?/" string (e.g., http://router-ip/anytext?/), the device may enter an infinite loop. If the attacke...

CVE-2000-0934

Glint in Red Hat Linux 5.2 is affected. The vulnerability allows local users to overwrite arbitrary files and cause a denial of service via a symlink attack. Root cause is a symlink-related flaw in Glint that enables path manipulation leading to file overwrites and service disruption. No explicit...

CVE-2000-1054

CVE-2000-1054 affects CiscoSecure ACS Server 2.4(2) and earlier, via the CSAdmin module. A buffer overflow in processing a large packet may allow remote denial of service and possibly arbitrary command execution. The provided documents do not specify mitigation or patch details.