7988 matches found
CVE-2000-0075
CVE-2000-0075 refers to the Super Mail Transfer Package (SMTP), later called MsgCore, suffering a memory leak that allows remote attackers to cause a denial of service by repeatedly issuing HELO, MAIL FROM, RCPT TO, and DATA commands within the same SMTP session. The affected product is described...
CVE-2000-0002
The provided documents confirm CVE-2000-0002 affects ZBServer Pro 1.50 and describes a buffer overflow in handling a long GET request, enabling remote command execution by an attacker. The OpenVAS entries corroborate a remote overflow/DoS scenario related to too-long URLs. No product-specific rem...
CVE-2000-0459
IMP does not remove files properly if the MSWordView application quits, which allows local users to cause a denial of service by filling up the disk space by requesting a large number of documents and prematurely stopping the request...
CVE-2000-0515
The snmpd.conf configuration file for the SNMP daemon snmpd in HP-UX 11.0 is world writable, which allows local users to modify SNMP configuration or gain privileges...
CVE-2000-0514
The CVE-2000-0514 issue affects the GSSFTP FTP daemon in Kerberos 5 1.1.x , where access to certain FTP commands is not properly restricted. This leads to a remote denial of service and enables local users to gain root privileges . The available connected documents confirm the affected component ...
CVE-2000-0511
CVE-2000-0511 concerns CUPS (Common Unix Printing System) 1.04 and earlier, where a remote attacker can cause a denial of service by sending a CGI POST request. The vulnerability affects the CUPS CGI handling path and is described as a remote DoS with no confidentiality or integrity impact, and p...
CVE-2000-0599
Buffer overflow in iMesh 1.02 allows remote attackers to execute arbitrary commands via a long string to the iMesh port...
CVE-2000-0322
The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters...
CVE-2000-0627
BlackBoard CourseInfo 4.0 is affected by an authentication flaw that allows local users to modify CourseInfo database information and gain privileges by directly calling supporting CGI programs such as user_update_passwd.pl and user_update_admin.pl. The provided documents do not include remediati...
CVE-2000-0666
rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain root privileges...
CVE-2000-0708
Buffer overflow in Pragma Systems TelnetServer 2000 version 4.0 allows remote attackers to cause a denial of service via a long series of null characters to the rexec port...
CVE-2000-0566
makewhatis in Linux man package allows local users to overwrite files via a symlink attack...
CVE-2000-0610
NetWin dMailWeb and cwMail 2.6g and earlier allows remote attackers to bypass authentication and use the server for mail relay via a username that contains a carriage return...
CVE-2000-0768
The CVE-2000-0768 issue affects Internet Explorer 4.x and 5.x where a function that verifies the domain of a frame within a browser window fails to properly verify, enabling a remote attacker to read client files. Affected component: the Frame Domain Verification logic in IE. Root cause: inadequa...
CVE-2000-0633
Technical details for CVE-2000-0633 are not publicly available in the provided documents. The description notes a local reboot/halt issue in the Mandrake Linux usermode package, but no specifics on affected versions, root cause, or fixes are supplied. Monitor for updates.
CVE-2000-0505
The Apache 1.3.x HTTP server for Windows platforms allows remote attackers to list directory contents by requesting a URL containing a large number of / characters...
CVE-2000-0778
CVE-2000-0778 affects Microsoft IIS (IIS 5.0/5.1). Vulnerability arises from an information-disclosure flaw where an HTTP Translate: f header allows remote attackers to obtain ASP/ASA source code. Affected products include Windows IIS; root cause is improper handling of the Translate header leadi...
CVE-2000-0474
Real Networks RealServer 7.x allows remote attackers to cause a denial of service via a malformed request for a page in the viewsource directory...