CVE-2000-0733

CVE-2000-0733 affects the Telnetd server on IRIX 5.2–6.1, where the service fails to properly sanitize user-supplied format strings in the IAC-SB-TELOPT_ENVIRON request. This leads to a remote code execution condition via a crafted long RLD variable, enabling arbitrary commands on vulnerable syst...

CVE-2000-0706

CVE-2000-0706: Public documents confirm a buffer overflow in ntop when running in web mode that enables remote arbitrary commands. The provided materials do not specify affected versions, root cause details, exploits, or any patch/workaround. Information on remediation is not available in the inc...

CVE-2000-0683

BEA WebLogic 5.1.x is affected by an information-disclosure vulnerability where remote attackers can read the source code of parsed JSP pages by injecting /*.shtml/ into the URL, which invokes the SSIServlet. The underlying cause is JSP/SSIServlet invocation that allows viewing source code, leadi...

CVE-2000-0665

CVE-2000-0665 affects GAMSoft TelSrv 1.4/1.5 (and earlier) Telnet server. A remote attacker can crash the service by sending a long username due to a buffer/printf vulnerability in username handling (stack overflow). Documented references indicate in-the-wild modules and disclosures (Metasploit, ...

CVE-2000-0639

The issue affects Big Brother 1.4h2 and earlier; default configuration lacks proper access restrictions, enabling remote upload of a file via bbd that can be executed as a CGI script by the web server, allowing remote command execution. CVSS2 base impact is high (7.5). No remediation details are ...

CVE-2000-0624

CVE-2000-0624 describes a buffer overflow in Winamp 2.64 and earlier that can be triggered by a long #EXTINF: extension in an M3U playlist, potentially allowing a remote attacker to execute arbitrary commands. The initial reports do not provide additional technical specifics beyond this descripti...

CVE-2000-0501

MDaemon 2.8.5.0 POP server is affected by a race condition that can cause a denial of service when a UIDL command is issued and the server is exited rapidly. The issue is described as a local DoS with partial availability impact and a low CVSS. No exploitation details are provided in the availabl...

CVE-2000-0495

Microsoft Windows Media Encoder is affected by CVE-2000-0495, which allows remote attackers to cause a denial of service via a malformed request. The vulnerability is network-exploitable with no authentication and has an impact on availability (base score 5.0, CVSS2: AV:N/AC:L/Au:N/C:N/I:N/A:P). ...

CVE-2000-0493

The CVE-2000-0493 entry describes a buffer overflow in the Simple Network Time Sync (SMTS) daemon that allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long string. No details on affected versions, vendor, or available fixes are provided in the co...

CVE-2000-0430

The provided documents identify CVE-2000-0430 as a flaw in Cart32 where remote attackers can access sensitive debugging information by appending /expdate to the URL. Affected component: Cart32 (web/URL handling). Root cause: improper handling of URL paths leading to exposure of debugging data; im...

CVE-2000-0378

The vulnerability CVE-2000-0378 affects the pam_console PAM module in Linux systems. It arises because the module performs a chown on various devices at user login, and an open file descriptor for those devices can remain open after logout. This allows the user to sniff activity on those devices ...

CVE-2000-0340

Affected software: Gnomelib on SuSE Linux 6.3. Vulnerability: buffer overflow in Gnomelib that allows local users to execute arbitrary commands via the DISPLAY environment variable. Root cause: buffer overflow; Impact: local arbitrary command execution. Remediation: no patch/version details provi...

CVE-2000-0332

UltraBoard 1.6 is affected by a path traversal in UltraBoard.pl/UltraBoard.cgi that allows remote attackers to read arbitrary files by supplying a pathname containing .. followed by a null byte. The vulnerability is described as arbitrary file access via this traversal vector; no exploitation det...

CVE-2000-0265

CVE-2000-0265 affects Panda Security 3.0. The vulnerability allows a user to uninstall the Panda software through the system’s Add/Remove Programs interface. The available sources state the issue but do not provide exploit details, affected versions beyond 3.0, or specific root-cause mechanisms. ...

CVE-2000-0128

The CVE-2000-0128 entry affects Finger Server 0.82 and is caused by input that allows shell metacharacters to be interpreted, enabling remote command execution. The vulnerability is documented with a high CVSS v2 score (AV:N/AC:L/Au:N/C:C/I:C/A:C). The provided records do not specify affected pla...

CVE-2000-0582

CVE-2000-0582 affects Check Point FireWall-1 releases 4.0 and 4.1. A remote attacker can cause a denial of service by sending a stream of invalid commands (e.g., binary zeros) to the SMTP Security Server proxy. The available sources confirm the affected product/versions and the impact as describe...

CVE-2000-0507

CVE-2000-0507 concerns Imate Webmail Server 2.5. A remote attacker can cause a denial of service by sending a HELO command with an extremely long argument, potentially crashing/shutting down the SMTP service (network exploit, no auth required; availability impact). The vulnerability stems from ha...

CVE-2000-0443

The CVE-2000-0443 entry concerns the HP Web JetAdmin 5.6 web interface server, which is vulnerable to a directory traversal (.. attack) allowing remote attackers to read arbitrary files. The core issue is a failure to sanitize path inputs in the web interface, enabling access to files outside the...

CVE-2000-0272

CVE-2000-0272 affects RealNetworks RealServer, where a remote attacker can cause denial of service by sending malformed input to port 7070. The connected Nessus plugin corroborates a crash condition via specially crafted packets and recommends upgrading RealServer to the most recent version as a ...

CVE-2000-0166

CVE-2000-0166 affects the InterAccess TelnetD server. A buffer overflow is triggered by a long login name, potentially allowing a remote attacker to execute commands. The NVD entry assigns a HIGH risk (CVSSv2: AV:N/AC:L/Au:N/C:C/I:C/A:C, base 10.0). No remediation details are provided in the conn...