CVE-2000-0631

The CVE-2000-0631 entry concerns an IIS administrative script that was in IIS 3.0 and later included in IIS 4.0 and 5.0. The vulnerability allows remote attackers to cause a denial of service by accessing the script without a specific argument (the Absent Directory Browser Argument). The connecte...

CVE-2000-0469

The vulnerability concerns Selena Sol WebBanner 4.0, where a path traversal flaw (.. sequence) enables remote attackers to read arbitrary files. Affected software: Selena Sol WebBanner 4.0. The description specifies reading arbitrary files via directory traversal, but no further technical details...

CVE-2000-0642

The WebActive HTTP Server 1.00 stores the web access log active.log in the document root, allowing remote viewing via direct requests and enabling information disclosure about site visitors. This relies on the default configuration. Remediation guidance from the connected data includes using a di...

CVE-2000-0643

Technical details for CVE-2000-0643 are not publicly provided in the supplied documents; no affected versions, root cause, or remediation are stated here. Monitor for updates from official advisories and vendor advisories.

CVE-2000-0585

CVE-2000-0585 affects the ISC DHCP client program dhclient. The flaw allows remote attackers to execute arbitrary commands via shell metacharacters in DHCP responses. CVSS-2.0 base score is 10.0 (NETWORK, LOW ATTACK, NONE AUTH, C/I/A = COMPLETE). No remediation details are provided in the connect...

CVE-2000-0751

The CVE-2000-0751 issue concerns mopd (Maintenance Operations Protocol loader daemon) that fails to properly cleanse user-supplied format strings, enabling remote attackers to execute arbitrary commands. The vulnerability is described as a format-string vulnerability in mopd, with potential for a...

CVE-2000-0745

CVE-2000-0745 affects PHP-Nuke where admin.php3 does not properly verify the administrator password, enabling privilege escalation when a URL omits the aid/pwd parameters. Connected documents provide a detailed exploitation path: an attacker can manipulate URL parameters and the cookiedecode rout...

CVE-2000-0737

The CVE-2000-0737 entry describes a vulnerability in the Windows 2000 Service Control Manager (SCM) where SCM creates predictable named pipes for system services. This behavior can be abused by a local user with console access to impersonate services and gain administrator privileges. The impact ...

CVE-2000-0711

Vulnerability summary (CVE-2000-0711) : Netscape Communicator fails to prevent a ServerSocket object from being created by untrusted entities, enabling a remote attacker to start a server on the victim’s system via a malicious applet (as demonstrated by Brown Orifice). The underlying issue is a f...

CVE-2000-0703

CVE-2000-0703 affects suidperl (sperl). The vulnerability arises because suidperl does not properly cleanse the escape sequence "~!" before invoking /bin/mail to report errors. This enables local users to gain privileges by setting the interactive environmental variable and running suidperl with ...

CVE-2000-0676

CVE-2000-0676 affects Netscape Communicator/Navigator 4.04–4.74. An unsigned Java applet could read local files (e.g., file://) and connect to remote resources via file/http/https/ftp URLs, enabling data exfiltration via Brown Orifice. Root cause is an implementation error in the JRE bundled with...

CVE-2000-0671

The vulnerability CVE-2000-0671 affects Roxen Web Server prior to 2.0.69. An attacker can insert a null character (%00) into the URL to bypass access restrictions, list directory contents, and read source code, resulting in information disclosure. Affected component: Roxen Web Server (versions

CVE-2000-0668

CVE-2000-0668 affects the Linux pam_console PAM module when a display manager (gdm or kdm) has XDMCP enabled. The vulnerability allows a user to access the system console and reboot the system, with a Medium severity (CVSS v2 base score 5.0) and a Partial availability impact. The provided sources...

CVE-2000-0652

The CVE-2000-0652 entry describes a vulnerability in IBM WebSphere where remote attackers can read source code of executable web files by directly invoking the default InvokerServlet with a URL containing the string “/servlet/file.” This is a network-accessible issue that exposes partial confiden...

CVE-2000-0644

CVE-2000-0644 affects WFTPD and WFTPD Pro 2.41. The vulnerability enables remote denial of service by issuing a STAT command while a LIST command is still in progress. The public sources in the connected documents confirm the impact as a partial availability degradation, but the materials do not ...

CVE-2000-0640

CVE-2000-0640 affects Guild FTPd and describes a path traversal vulnerability where an attacker can use dot-dot sequences to determine whether files exist outside the FTP root. The issue arises because the server returns different error messages based on file existence, enabling remote discovery ...

CVE-2000-0630

Summary: IIS 4.0 and 5.0 can disclose fragments of source code by requesting a known file with a appended +.htr, via the ISAPI-based .HTR handling in IIS. What’s affected: Microsoft Internet Information Services (IIS) 4.0/5.0, specifically the mechanism that processes .HTR ISAPI scripts (ISM.DLL)...

CVE-2000-0594

CVE-2000-0594 affects the BitchX IRC client. The vulnerability arises from improper cleansing of an untrusted format string in the /INVITE command, allowing a remote attacker to trigger a denial of service by inviting a channel whose name includes special formatting characters. Connected document...

CVE-2000-0588

SawMill 5.0.21 CGI is affected by an information disclosure vulnerability where remote, unauthenticated attackers can read the first line of arbitrary files by supplying a target file in the rfcf parameter. SawMill processes the parameter contents as configuration commands, enabling path traversa...

CVE-2000-0586

Dalnet IRC server 4.6.5 is affected by a buffer overflow via the SUMMON command, enabling remote denial of service and potential arbitrary command execution. The provided documents do not specify a patch or remediation; no exploit details are listed. Monitor for updates and verify vendor advisori...