CVE-2000-1058

The CVE-2000-1058 issue affects HP OpenView Network Node Manager (NNM) 6.1 and earlier, where the OverView5 CGI program contains a buffer overflow vulnerability. The flaw in the Java SNMP MIB Browser Object ID parsing can be exploited remotely via the SNMP service (snmp.exe), potentially causing ...

CVE-2000-0930

Pegasus Mail

CVE-2000-1057

CVE-2000-1057 : Vulnerabilities in the database configuration scripts of HP OpenView Network Node Manager (NNM) 6.1 and earlier allow local users to gain privileges, potentially via insecure permissions. The public documents do not specify affected versions beyond 6.1 and earlier, nor provide exp...

CVE-2000-1010

The CVE is a format-string vulnerability in talkd reported across multiple UNIX-like systems. Affected: IRIX (talkd in /usr/etc/talkd), UnixWare 7.1.1 and Open UNIX 8.0.0 (in.talkd); OpenBSD and possibly other BSDs per the CVE description. Root cause: untrusted user-supplied fields in talkd allow...

CVE-2000-0813

Technical details about CVE-2000-0813 are not publicly provided in the connected documents you supplied. The materials do not specify affected products/versions beyond Check Point VPN-1/FireWall-1 4.1 and earlier, nor concrete remediation steps. Monitor for updates.

CVE-2000-0930

Pegasus Mail 3.12 allows remote attackers to read arbitrary files via an embedded URL that calls the mailto: protocol with a -F switch...

CVE-2000-1050

The CVE-2000-1050 entry concerns Allaire JRun 3.0/3.1-era HTTP servlet servers where an information-disclosure vulnerability allows remote attackers to access WEB-INF (and related) directories. The root cause is an information-disclosure path handling flaw triggered by a URL request that contains...

CVE-2000-0909

The connected Mandrake advisory documents a buffer overflow in Pine 4.21 and earlier during the automatic mail checking (periodic new mail) when processing a long From: header, enabling remote code execution by a crafted email. The issue affects the Pine mail reader; an updated package (MDKSA-200...

CVE-2000-1149

The CVE-2000-1149 issue affects Microsoft Windows NT 4.0 Terminal Server, where a buffer overflow in RegAPI.DLL allows remote code execution via a specially crafted username. The vulnerability can be exploited by anyone with access to port 3389/TCP and could grant the attacker the privileges of a...

CVE-2000-1026

CVE-2000-1026 involves multiple buffer overflows in LBNL tcpdump that allow remote attackers to execute arbitrary commands. Affected software is tcpdump (LBNL). The vulnerability is triggered by crafting inputs over the network and, per CVSS, has high impact with full confidentiality, integrity, ...

CVE-2000-0870

CVE-2000-0870 corresponds to a buffer overflow in EFTP that allows remote attackers to cause a denial of service by sending a long string. The NVD entry characterizes this as a network-facing issue with low attack complexity and partial impacts to confidentiality, integrity, and availability. Con...

CVE-2000-0849

The CVE-2000-0849 entry describes a race condition in Microsoft Windows Media server that allows remote attackers to cause a denial of service in the Windows Media Unicast Service through a malformed request, aka the Unicast Service Race Condition vulnerability. Affected component is the Windows ...

CVE-2000-0523

The CVE-2000-0523 entry describes a buffer overflow in the logging feature of EServ versions 2.9.2 and earlier. The vulnerability allows an attacker to execute arbitrary commands via a long MKD command. Primary documentation indicates impact as arbitrary command execution with a high-severity sco...

CVE-2000-1143

Technical details (affected product/version, root cause, exploitability, and remediation) are not publicly provided in the supplied documents. Monitor for updates to the CVE-2000-1143 entry.

CVE-2000-1022

The mailguard feature in Cisco Secure PIX Firewall 5.22 and earlier does not properly restrict access to SMTP commands, which allows remote attackers to execute restricted commands by sending a DATA command before sending the restricted commands...

CVE-2000-0956

cyrus-sasl before 1.5.24 in Red Hat Linux 7.0 does not properly verify the authorization for a local user, which could allow the users to bypass specified access restrictions...

CVE-2000-1073

csstart program in iCal 2.1 Patch 2 searches for the cshttpd program in the current working directory, which allows local users to gain root privileges by creating a Trojan Horse cshttpd program in a directory and calling csstart from that directory...

CVE-2000-0936

Samba SWAT in Samba 2.0.7 exposes the cgi.log file with world-readable permissions, enabling local users to read sensitive data (e.g., user names and passwords). Affected component: Samba Web Administration Tool (SWAT). Root cause: SWAT’s logging file is installed world-readable, leaking credenti...

CVE-2000-1189

CVE-2000-1189 describes a buffer overflow in the pam_localuser PAM module used by Red Hat Linux 7.x and 6.x, enabling privilege escalation. The underlying cause is a memory handling flaw in pam_localuser, leading to complete confidentiality, integrity, and availability impacts as stated in the CV...

CVE-2000-0867

Kernel logging daemon (klogd) in Linux (sysklogd) is vulnerable due to a 'format bug' that fails to cleanse user-supplied format strings, enabling local users to gain root privileges by triggering malformed kernel messages. Mandrake MDKSA-2000:050-1 describes a patched klogd version; Debian patch...