CVE-2000-0507

CVE-2000-0507 concerns Imate Webmail Server 2.5. A remote attacker can cause a denial of service by sending a HELO command with an extremely long argument, potentially crashing/shutting down the SMTP service (network exploit, no auth required; availability impact). The vulnerability stems from ha...

CVE-2000-0443

The CVE-2000-0443 entry concerns the HP Web JetAdmin 5.6 web interface server, which is vulnerable to a directory traversal (.. attack) allowing remote attackers to read arbitrary files. The core issue is a failure to sanitize path inputs in the web interface, enabling access to files outside the...

CVE-2000-0272

CVE-2000-0272 affects RealNetworks RealServer, where a remote attacker can cause denial of service by sending malformed input to port 7070. The connected Nessus plugin corroborates a crash condition via specially crafted packets and recommends upgrading RealServer to the most recent version as a ...

CVE-2000-0166

CVE-2000-0166 affects the InterAccess TelnetD server. A buffer overflow is triggered by a long login name, potentially allowing a remote attacker to execute commands. The NVD entry assigns a HIGH risk (CVSSv2: AV:N/AC:L/Au:N/C:C/I:C/A:C, base 10.0). No remediation details are provided in the conn...

CVE-2000-0641

CVE-2000-0641 affects the Savant Web Server (3.1 and earlier) and is linked to multiple vulnerability records in OpenVAS/Nessus indicating a “WWW Too Long URL”/buffer overflow flaw. The available data state that remote attackers could cause the server to execute arbitrary commands via a long GET ...

CVE-2000-0707

CVE-2000-0707 affects PCCS MySQLDatabase Admin Tool Manager, versions 1.2.4 and earlier. The vulnerability stems from installing the file dbconnect.inc inside the web root, which permits remote attackers to read it and obtain sensitive credentials such as the database administrative password. Ope...

CVE-2000-0597

The CVE-2000-0597 entry concerns Microsoft Office 2000 (Excel and PowerPoint) and PowerPoint 97. The vulnerability arises because these products are marked as safe for scripting, enabling a remote attacker to coax Internet Explorer or some email clients to save files to arbitrary locations via th...

CVE-2000-0501

Race condition in MDaemon 2.8.5.0 POP server allows local users to cause a denial of service by entering a UIDL command and quickly exiting the server...

CVE-2000-0525

CVE-2000-0525: OpenSSH does not properly drop privileges when UseLogin is enabled, allowing local users to execute arbitrary commands by supplying the command to the ssh daemon. Affected: OpenSSH with UseLogin enabled. Root cause: privileges not dropped correctly after authentication. Impact: pot...

CVE-2000-0470

Allegro RomPager 2.10 is vulnerable to a remote denial-of-service caused by a malformed authentication request. Multiple connected sources (OpenVAS and Nessus entries, plus CVE record) confirm that sending a specifically crafted request to RomPager 2.10 can crash the device and render the network...

CVE-2000-0318

CVE-2000-0318 affects Atrium Mercur Mail Server 3.2 via a local directory traversal vulnerability (dot-dot). The vulnerability allows a local attacker to read other users’ email and to create arbitrary files by exploiting a path traversal issue. The available documents do not provide explicit exp...

CVE-2000-0374

The CVE describes that the default configuration of kdm (Caldera/Mandrake Linux and possibly others) allows XDMCP connections from any host, causing information leakage and potential bypass of access restrictions. CERT/CC notes this as an information leakage vulnerability via XDMCP daemon default...

CVE-2000-0706

Buffer overflows in ntop running in web mode allows remote attackers to execute arbitrary commands...

CVE-2000-0282

TalentSoft webpsvr daemon in the Web+ shopping cart application allows remote attackers to read arbitrary files via a .. dot dot attack on the webplus CGI program...

CVE-2000-0666

CVE-2000-0666 affects the rpc.statd component of the nfs-utils package across various Linux distributions. The vulnerability arises from the rpc.statd daemon failing to cleanse untrusted format strings, with CERT/CC documenting that user-supplied data can be passed to syslog as a format string, e...

CVE-2000-0002

Buffer overflow in ZBServer Pro 1.50 allows remote attackers to execute commands via a long GET request...

CVE-2000-0257

Buffer overflow in the NetWare remote web administration utility allows remote attackers to cause a denial of service or execute commands via a long URL...

CVE-2000-0767

The vulnerability CVE-2000-0767 is the Scriptlet Rendering issue in the ActiveX control used to invoke a scriptlet in Internet Explorer 4.x/5.x. The ActiveX control renders arbitrary file types instead of HTML, enabling an attacker to read arbitrary files. This entry describes the vulnerability w...

CVE-2000-0064

cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to cause a denial of service via a malformed URL that includes shell metacharacters...

CVE-2000-0466

Affected software: AIX cdmount (part of UMS) on AIX systems. The issue arises from insecure handling of user-supplied arguments in cdmount, which spawns a shell to invoke the mount command with those arguments, allowing local users to execute arbitrary commands as root (SUID root wrapper). Impact...