CVE-2000-0933

Technical details (affected products, exact root cause, vulnerable components, versions, or fixes) are not provided in the connected documents; monitor for updates.

CVE-2000-0863

Buffer overflow in listmanager earlier than 2.105.1 allows local users to gain additional privileges...

CVE-2000-1089

Buffer overflow in Microsoft Phone Book Service allows local users to execute arbitrary commands, aka the "Phone Book Service Buffer Overflow" vulnerability...

CVE-2000-0729

CVE-2000-0729 affects FreeBSD 3.x, 4.x, and 5.x, where local users can cause a denial of service by executing a program with a malformed ELF image header. The available documents do not provide exploitation details, affected binaries, patch versions, or remediation guidance. No root cause or fixe...

CVE-2000-0917

CVE-2000-0917 describes a format-string vulnerability in LPRng’s use_syslog() in version 3.6.24 (and earlier), enabling remote attackers to execute arbitrary commands. Multiple sources corroborate: Red Hat RHSA-2000-065 notes vulnerability in 3.6.24 and earlier; CERT advisories document the forma...

CVE-2000-0805

Check Point VPN-1/FireWall-1 4.1 and earlier improperly retransmits encapsulated FWS packets, even if they do not come from a valid FWZ client, aka "Retransmission of Encapsulated Packets."...

CVE-2000-1074

CVE-2000-1074 affects the csstart program in iCal 2.1 Patch 2. It uses relative pathnames to install libsocket and libnsl, enabling the icsuser account to gain root privileges by placing a Trojan Horse library in the current or parent directory. The available documents state the vulnerability and...

CVE-2000-0672

The CVE-2000-0672 issue concerns the default configuration of Jakarta Tomcat which does not restrict access to the /admin context, enabling a remote attacker to read arbitrary files by invoking administrative servlets to add a context for the root directory. The vulnerability affects the admin co...

CVE-2000-0810

Auction Weaver (LITE) versions 1.0–1.04 suffer a form-field name validation flaw that allows remote attackers to delete arbitrary files and directories via a dot-dot path traversal. The underlying issue is improper validation of input names, enabling remote exploitation without authentication. Im...

CVE-2000-1135

CVE-2000-1135 describes a local privilege issue in the fshd (fsh daemon) on Debian GNU/Linux. The vulnerability allows a local user to overwrite files belonging to other users via a symbolic link (symlink) attack. The impact is partial confidentiality, integrity, and availability due to the abili...

CVE-2000-0951

The CVE-2000-0951 issue affects Microsoft IIS (likely IIS 5.0) where Index Server is enabled and the Index property misconfigured, allowing remote users to list web root directories via a WebDAV search. This results in information disclosure about remote directories and HTML files, increasing an ...

CVE-2000-0932

MAILsweeper for SMTP 3.x is affected by a vulnerability where corrupt CDA documents in a ZIP file are not handled properly, causing the application to hang and enabling a remote denial of service . The description does not provide exploit specifics, affected versions beyond the 3.x line, or remed...

CVE-2000-0732

Technical details about CVE-2000-0732 are not publicly available in the provided connected documents. The description remains limited to a denial-of-service via a long URL. Monitor for updates when more information becomes available.

CVE-2000-0991

Hilgraeve HyperTerminal client for Windows 98/ME/2000 is affected by CVE-2000-0991. The vulnerability is a buffer overflow in the telnet URL handling, allowing remote attackers to execute arbitrary commands via a long telnet URL over a network. Affected component: HyperTerminal client; root cause...

CVE-2000-0959

glibc2 does not properly clear the LDDEBUGOUTPUT and LDDEBUG environmental variables when a program is spawned from a setuid program, which could allow local users to overwrite files via a symlink attack...

CVE-2000-1120

CVE-2000-1120: IBM AIX digest command has a buffer overflow in a filename argument that may let a local attacker gain root privileges. Reported exploit exists; attacker must have local access and belong to the printq group. IBM provided patches via APARs IY08287 (AIX 4.2) and IY08143 (AIX 4.3) to...

CVE-2000-0980

NMPI Name Management Protocol on IPX listener in Microsoft NWLink does not properly filter packets from a broadcast address, which allows remote attackers to cause a broadcast storm and flood the network...

CVE-2000-1073

CVE-2000-1073 affects the iCal 2.1 Patch 2 environment through the csstart program. The root cause is that csstart searches for the cshttpd executable in the current working directory; a local user can place a Trojan Horse cshttpd in a directory and run csstart from there, enabling local privileg...

CVE-2000-0868

The CVE-2000-0868 issue affects Apache 1.3.12 on SuSE Linux 6.4 where the default configuration exposes CGI script source code. The vulnerability arises because /cgi-bin/ requests can be rewritten to /cgi-bin-sdb/, which is an Alias of /cgi-bin, enabling remote attackers to disclose source code o...

CVE-2000-0965

The CVE-2000-0965 entry affects HP-UX VVOS 10.24 and 11.04, where the NSAPI plugins for TGA and the Java Servlet proxy are the vulnerable components. The underlying issue is a condition that allows an attacker to cause a denial of service via high CPU utilization. No explicit remediation or patch...