7988 matches found
CVE-2000-0586
Dalnet IRC server 4.6.5 is affected by a buffer overflow via the SUMMON command, enabling remote denial of service and potential arbitrary command execution. The provided documents do not specify a patch or remediation; no exploit details are listed. Monitor for updates and verify vendor advisori...
CVE-2000-0584
CVE-2000-0584 affects the Canna input service. The vulnerability is a buffer overflow in the SR_INIT handling that can occur when a long user name or group name is supplied, enabling a remote attacker to crash the service and may allow arbitrary code execution. The issue is documented across mult...
CVE-2000-0571
CVE-2000-0571 relates to a vulnerability in the LocalWEB HTTP server (v1.2.0) where a long GET request can trigger a denial of service. Connected scans reference a broader “WWW Too Long URL” DoS issue and describe the underlying risk as a buffer/URL length handling flaw that can crash the remote ...
CVE-2000-0567
The CVE-2000-0567 issue affects Microsoft Outlook and Outlook Express through a vulnerable Date header in emails. The root cause is a buffer overflow that can be triggered remotely by processing a crafted email, allowing arbitrary commands to execute on affected systems. The vulnerability is cate...
CVE-2000-0538
CVE-2000-0538 affects ColdFusion Administrator for ColdFusion 4.5.1 and earlier. A remote attacker can cause a denial-of-service by submitting an abnormally long login password, with OpenVAS notes describing passwords over 40,0000 characters that overwhelm the server. No explicit fixes or patches...
CVE-2000-0537
BRU backup software is affected. Local users can cause arbitrary data to be appended to files by supplying an alternate configuration file via the BRUEXECLOG environment variable. The description does not specify affected versions, root cause beyond environmental variable handling, or remediation...
CVE-2000-0530
The CVE-2000-0530 entry describes a vulnerability in KDE 1.1.2 where the KApplication-class creates configuration files without proper ownership checks or existence verification. The result is a local privilege-attack risk: a local user can exploit a symlink/ownership flaw to overwrite arbitrary ...
CVE-2000-0516
The CVE-2000-0516 entry concerns Shiva Access Manager 5.0.0, where configuration data stored in an LDAP directory includes the root DN and password written in cleartext to a file that is world-readable. This local-access vulnerability enables a local attacker to read sensitive credentials and com...
CVE-2000-0508
This CVE concerns rpc.lockd in Red Hat Linux 6.1 and 6.2, where remote attackers can cause a denial of service by sending a malformed request. The available connected documents corroborate the affected component (rpc.lockd) and the impact (remote DoS), but do not provide concrete patch versions o...
CVE-2000-0505
The CVE-2000-0505 entry concerns the Apache HTTP Server on Windows (Win32) in the 1.3.x line. The vulnerability allows remote attackers to list directory contents by issuing a URL containing a large sequence of forward slashes, which triggers directory listing of the web root as configured in htt...
CVE-2000-0494
Veritas Volume Manager contains a local-privilege issue where a world-writable .server_pids file can be modified by an unprivileged user to inject commands. Those commands are then executed by the vmsa_server script, enabling potentially arbitrary code execution with local access. The CVE descrip...
CVE-2000-0489
Technical details are not publicly available in the provided connected documents. Monitor for updates; no exposed exploit details, affected versions, or root-cause specifics are supplied here.
CVE-2000-0484
The CVE-2000-0484 entry describes a memory corruption flaw in Small HTTP Server v3.06 that leads to a memory overflow and a crash of the Structured Exception Handler, resulting in a Denial of Service. The affected component is the server’s memory handling for requests; the root cause is a memory ...
CVE-2000-0468
CVE-2000-0468 affects HP-UX 10.20 and 11, where a local attacker can overwrite files via a symbolic link attack. The entry indicates local access with low complexity and partial confidentiality/integrity/availability impact (CVSS v2 base 4.6). The connected documents corroborate the description b...
CVE-2000-0467
The CVE-2000-0467 entry documents a buffer overflow in Linux splitvt 1.6.3 and earlier, enabling local users to gain root privileges via a long password in the screen locking function. Affected component: splitvt (Linux). Root cause: buffer overflow in password handling within screen lock. Impact...
CVE-2000-0451
CVE-2000-0451 concerns the Intel Express 8100 ISDN router, where remote attackers can cause a denial of service by sending oversized or fragmented ICMP packets. The available connected metadata confirms the affected device and the specific attack vector (ICMP amplification/fragmentation) that lea...
CVE-2000-0440
NetBSD 1.4.2 and earlier are affected. The vulnerability allows remote attackers to cause a denial of service by sending a packet containing an unaligned IP timestamp option. The available documents confirm the affected product/version and the faulty IP timestamp option as the root cause, with Do...
CVE-2000-0347
CVE-2000-0347 affects Windows 95/98. The vulnerability is a denial-of-service triggered by sending a NetBIOS session request with a NULL source name to the remote host. The resulting impact is remote crash/DoS as described by multiple sources. No remediation details are provided in the supplied d...
CVE-2000-0179
HP OpenView OmniBack 2.55 is affected by a denial-of-service vulnerability caused by a large number of connections to TCP port 5555. The provided documents confirm the product/version and the impact on availability (PARTIAL) but do not reveal the underlying root cause, exploitation details, or a ...
CVE-2000-0146
The CVE-2000-0146 issue affects the Java Server in Novell GroupWise Web Access Enhancement Pack. A remote attacker can cause a denial of service by sending an excessively long URL to the servlet, leading to availability impact. Connected sources corroborate a URL-length-based DoS vector (e.g., lo...