8799 matches found
CVE-2000-0948
CVE-2000-0948 corresponds to a local vulnerability in GnoRPM prior to version 0.95, where insecure handling of /tmp allows a local user to modify arbitrary files via a symlink attack. The Mandrake MDKSA-2000:055 advisory explicitly states that versions before 0.95 used files in /tmp insecurely an...
CVE-2000-1073
CVE-2000-1073 affects the iCal 2.1 Patch 2 environment through the csstart program. The root cause is that csstart searches for the cshttpd executable in the current working directory; a local user can place a Trojan Horse cshttpd in a directory and run csstart from there, enabling local privileg...
CVE-2000-0868
The CVE-2000-0868 issue affects Apache 1.3.12 on SuSE Linux 6.4 where the default configuration exposes CGI script source code. The vulnerability arises because /cgi-bin/ requests can be rewritten to /cgi-bin-sdb/, which is an Alias of /cgi-bin, enabling remote attackers to disclose source code o...
CVE-2000-0965
The CVE-2000-0965 entry affects HP-UX VVOS 10.24 and 11.04, where the NSAPI plugins for TGA and the Java Servlet proxy are the vulnerable components. The underlying issue is a condition that allows an attacker to cause a denial of service via high CPU utilization. No explicit remediation or patch...
CVE-2000-0910
Horde library 1.02 allows attackers to execute arbitrary commands via shell metacharacters in the "from" address...
CVE-2000-1007
CVE-2000-1007 affects I-gear 3.5.7 and earlier; the issue stems from improper processing of log entries where a URL exceeds 255 characters, which can cause reporting errors. The available references describe the vulnerability as a processing flaw in log handling, with no explicit exploitation det...
CVE-2000-0989
The CVE-2000-0989 entry describes a buffer overflow in Intel InBusiness eMail Station 1.04.87 POP service. The flaw allows a remote attacker to trigger a denial of service and potentially execute commands by sending a long username. The provided sources confirm the affected component and the basi...
CVE-2000-0276
BeOS 4.5 and 5.0 are affected by CVE-2000-0276: local users can cause a denial of service through malformed direct system calls using interrupt 37. The vulnerability is described as affecting BeOS versions 4.5 and 5.0, with a partial impact on availability. The provided documents do not detail ex...
CVE-2000-1061
CVE-2000-1061 involves the Microsoft Virtual Machine (VM) in Internet Explorer 4.x–5.x, where an unsigned applet can create and use ActiveX controls. This enables a remote attacker to bypass IE security settings and execute arbitrary commands via a malicious web page or email. The underlying issu...
CVE-2000-0979
CVE-2000-0979 affects Windows 95/98/Me File and Print Sharing. The service does not properly enforce file-share passwords, allowing a remote attacker to bypass access controls by sending a 1‑byte password that matches the first character of the real password. The documented impact is partial conf...
CVE-2000-1187
CVE-2000-1187 involves a buffer overflow in the HTML parser of Netscape 4.75 and earlier. The vulnerability allows remote attackers to execute arbitrary commands by supplying a long password value in a form field. The available documents explicitly describe the affected component (HTML parser), t...
CVE-2000-0982
Consolidated details: The CVE affects Internet Explorer prior to version 5.5, where cached credentials for a secure site could be forwarded to insecure pages on the same site. This exposure could let remote attackers obtain credentials by monitoring connections to the web server. Root cause is th...
CVE-2000-0920
Boa Web Server prior to 0.94.8.3 is affected by a directory traversal vulnerability (CVE-2000-0920) that lets remote attackers read arbitrary files by using a modified .. path with encoded dot characters (%2E) in GET requests. Root cause: improper handling of path traversal in Boa’s file access. ...
CVE-2000-0764
Intel Express 500 series switches allow a remote attacker to cause a denial of service via a malformed IP packet...
CVE-2000-1181
The CVE-2000-1181 issue affects RealNetworks RealServer 7 and earlier, where an HTTP request to /admin/includes/ discloses parts of the server’s memory contents (potentially including credentials and tokens). The root cause is memory contents disclosure via an accessible admin path, enabling remo...
CVE-2000-0851
The CVE-2000-0851 issue is a buffer overflow in the Windows 2000 Still Image Service that enables local users to escalate privileges via a long WM_USER message. Affected component: Still Image Service on Windows 2000. Root cause: buffer overflow in handling WM_USER message. Impact: local privileg...
CVE-2000-1146
Technical details for CVE-2000-1146 are not publicly provided in the supplied documents. Available description notes a denial-of-service via /proc/self navigation in Recourse ManTrap 1.6. Monitor for updates.
CVE-2000-1136
elvis-tiny before 1.4-10 in Debian GNU/Linux, and possibly other Linux operating systems, allows local users to overwrite files of other users via a symlink attack...
CVE-2000-1179
Netopia ISDN Router 650-ST prior to firmware 4.3.5 is affected. An unauthenticated attacker can read system logs by directly connecting to the login screen and sending certain control characters, exposing partial confidentiality without user interaction. The description does not specify firmware ...