CVE-2000-1143

Technical details (affected product/version, root cause, exploitability, and remediation) are not publicly provided in the supplied documents. Monitor for updates to the CVE-2000-1143 entry.

CVE-2000-1022

The mailguard feature in Cisco Secure PIX Firewall 5.22 and earlier does not properly restrict access to SMTP commands, which allows remote attackers to execute restricted commands by sending a DATA command before sending the restricted commands...

CVE-2000-0956

cyrus-sasl before 1.5.24 in Red Hat Linux 7.0 does not properly verify the authorization for a local user, which could allow the users to bypass specified access restrictions...

CVE-2000-1095

CVE-2000-1095 affects modprobe in the modutils 2.3.x package. The vulnerability arises because modprobe uses popen() to invoke the echo program with user-supplied input, allowing unescaped shell metacharacters to be processed via /bin/sh when run through kmod-triggered paths. This can enable a lo...

CVE-2000-1073

csstart program in iCal 2.1 Patch 2 searches for the cshttpd program in the current working directory, which allows local users to gain root privileges by creating a Trojan Horse cshttpd program in a directory and calling csstart from that directory...

CVE-2000-0936

Samba SWAT in Samba 2.0.7 exposes the cgi.log file with world-readable permissions, enabling local users to read sensitive data (e.g., user names and passwords). Affected component: Samba Web Administration Tool (SWAT). Root cause: SWAT’s logging file is installed world-readable, leaking credenti...

CVE-2000-1189

CVE-2000-1189 describes a buffer overflow in the pam_localuser PAM module used by Red Hat Linux 7.x and 6.x, enabling privilege escalation. The underlying cause is a memory handling flaw in pam_localuser, leading to complete confidentiality, integrity, and availability impacts as stated in the CV...

CVE-2000-0867

Kernel logging daemon (klogd) in Linux (sysklogd) is vulnerable due to a 'format bug' that fails to cleanse user-supplied format strings, enabling local users to gain root privileges by triggering malformed kernel messages. Mandrake MDKSA-2000:050-1 describes a patched klogd version; Debian patch...

CVE-2000-0865

Buffer overflow in dvtermtype in Tridia Double Vision 3.07.00 allows local users to gain root privileges via a long terminal type argument...

CVE-2000-0850

The CVE-2000-0850 entry corresponds to Netegrity SiteMinder prior to version 4.11, where an authentication bypass is possible by appending "$/FILENAME.ext" to the requested URL. The exploit targets the authentication check and can succeed with extensions such as .ccc, .class, or .jpg, effectively...

CVE-2000-1072

iCal 2.1 Patch 2 installs many files with world-writeable permissions, which allows local users to modify the iCal configuration and execute arbitrary commands by replacing the iplncal.sh program with a Trojan horse...

CVE-2000-0914

OpenBSD 2.6 and earlier allows remote attackers to cause a denial of service by flooding the server with ARP requests...

CVE-2000-1001

add2basket.asp in Element InstantShop allows remote attackers to modify price information via the "price" hidden form variable...

CVE-2000-1080

Quake 1 quake1 and ProQuake 1.01 and earlier allow remote attackers to cause a denial of service via a malformed empty UDP packet...

CVE-2000-0968

The CVE-2000-0968 entry concerns the Half-Life dedicated server prior to build 3104, where a buffer overflow in handling a long rcon command allows remote execution of arbitrary commands. Evidence from NVD/CVE records confirms a network-based vulnerability with complete confidentiality, integrity...

CVE-2000-0679

The CVE-2000-0679 issue affects the CVS 1.10.8 client, where the client trusts pathnames received from the CVS server. Root cause: pathname handling allows the server to influence file creation. Impact: potential to create arbitrary files on the client. No remediation details are provided in the ...

CVE-2000-0977

mailfile.cgi CGI program in MailFile 1.10 allows remote attackers to read arbitrary files by specifying the target file name in the "filename" parameter in a POST request, which is then sent by email to the address specified in the "email" parameter...

CVE-2000-0858

CVE-2000-0858 targets Microsoft Windows NT 4.0 with Internet Information Services (IIS). The issue occurs when an IIS process (INETINFO.EXE) processes a sequence of malformed requests, leading to a denial-of-service condition. Affected component is IIS on Windows NT 4.0; root cause is malformed r...

CVE-2000-0946

The CVE-2000-0946 entry concerns Compaq Easy Access Keyboard software 1.3, where the keyboard’s custom buttons are not properly disabled when the screen is locked. This could allow an attacker with local access to gain privileges or execute programs without authorization. The connected records co...

CVE-2000-0808

The seed generation mechanism in the inter-module S/Key authentication mechanism in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to bypass authentication via a brute force attack, aka "One-time s/key Password Authentication."...