CVE-2000-0808

The seed generation mechanism in the inter-module S/Key authentication mechanism in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to bypass authentication via a brute force attack, aka "One-time s/key Password Authentication."...

CVE-2000-0922

Directory traversal vulnerability in Bytes Interactive Web Shopper shopping cart program shopper.cgi 2.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot attack on the newpage parameter...

CVE-2000-1169

OpenSSH client prior to 2.3.0 can fail to disable X11 or agent forwarding, enabling a malicious SSH server to access the X11 display and sniff events or to access the ssh-agent. Affected component is the SSH client’s forwarding behavior; root cause is improper disabling of X11/agent forwarding. T...

CVE-2000-0973

Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbitrary commands by forcing a long error message to be generated...

CVE-2000-0910

Affected software: Horde library 1.02. Vulnerability: arbitrary commands can be executed via shell metacharacters in the from address. Root cause: lack of proper sanitization of shell metacharacters in the From field. Impact: potential remote code execution as implied by command execution in the ...

CVE-2000-0992

Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. dot dot attack...

CVE-2000-0852

The CVE-2000-0852 entry concerns multiple buffer overflows in the eject utility on FreeBSD (and possibly other OSes), allowing local users to gain root privileges. The connected documents confirm the affected component (eject) and the impact (local privilege escalation to root). No vendor-specifi...

CVE-2000-1132

The CVE-2000-1132 entry concerns the DCForum cgforum.cgi CGI script, where a malformed forum variable allows remote attackers to read arbitrary files and to delete the script itself. This describes improper input validation in the CGI handling leading to arbitrary file read and self-deletion. No ...

CVE-2000-0969

Format string vulnerability in Half Life dedicated server build 3104 and earlier allows remote attackers to execute arbitrary commands by injecting format strings into the changelevel command, via the system console or rcon...

CVE-2000-0846

CVE-2000-0846 affects Darxite 0.4 and earlier. The underlying issue is a buffer overflow triggered by a long username or password, enabling a remote attacker to execute arbitrary commands. Documented impact is remote command execution with a base CVSS v2 score of 7.5 (HIGH) under NETWORK exposure...

CVE-2000-1056

CiscoSecure ACS Server 2.4(2) and earlier versions are affected by an LDAP authentication bypass when the LDAP server allows null passwords. The vulnerability allows remote attackers to bypass authentication and access the server, with partial impact to confidentiality, integrity, and availabilit...

CVE-2000-1043

CVE-2000-1043 describes a format-string vulnerability in the ypserv component (and related ypbind behavior) affecting Mandrake Linux 7.1 and earlier, with potential impact on other Linux systems. The underlying issue is a format-string bug that can allow an attacker to gain root privileges when y...

CVE-2000-0928

WQuinn QuotaAdvisor 4.1 allows users to list directories and files by running a report on the targeted shares...

CVE-2000-1054

Buffer overflow in CSAdmin module in CiscoSecure ACS Server 2.42 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a large packet...

CVE-2000-0978

The CVE-2000-0978 entry concerns the Big Brother System and Network Monitor (bbd server). It identifies a vulnerability in versions before 1.5c2 where remote attackers could execute arbitrary commands via the shell metacharacter “&”. The impact is remote command execution with the potential for p...

CVE-2000-0921

CVE-2000-0921 describes a directory traversal in Hassan Consulting’s shop.cgi shopping cart, allowing remote attackers to read arbitrary files by using a .. payload in the page parameter. The issue is due to improper handling of relative paths, enabling access to sensitive files and potentially e...

CVE-2000-0919

CVE-2000-0919 is a directory traversal vulnerability in PHPix Photo Album 1.0.2 and earlier that allows remote attackers to read arbitrary files by prefixing a path with ..%2F..%2F (dot-dot). OpenVAS/Nessus entries confirm the issue with an example payload such as /Album/?mode=album&album=..%2F.....

CVE-2000-0864

The CVE-2000-0864 issue affects the esound daemon used by GNOME, with versions up to and including 0.2.19. A race condition during creation of the Unix domain socket (and its accompanying world-writable /tmp/.esd directory) allows a local attacker to change permissions on arbitrary files/director...

CVE-2000-0922

CVE-2000-0922 affects Bytes Interactive Web Shopper shopper.cgi (2.0 and earlier). The vulnerability is a directory traversal via the newpage parameter (.. attack), enabling remote attackers to read arbitrary files on the web server. Multiple sources (NVD, CVE listings, Nessus/OpenVAS entries) co...

CVE-2000-0992

Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. dot dot attack...