CVE-2000-0782

netauth.cgi program in Netwin Netauth 4.2e and earlier allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2000-0787

IRC Xchat client versions 1.4.2 and earlier allows remote attackers to execute arbitrary commands by encoding shell metacharacters into a URL which XChat uses to launch a web browser...

CVE-2000-0631

An administrative script from IIS 3.0, later included in IIS 4.0 and 5.0, allows remote attackers to cause a denial of service by accessing the script without a particular argument, aka the "Absent Directory Browser Argument" vulnerability...

CVE-2000-0685

BEA WebLogic 5.1.x does not properly restrict access to the PageCompileServlet, which could allow remote attackers to compile and execute Java JHTML code by directly invoking the servlet on any source file...

CVE-2000-0475

Windows 2000 allows a local user process to access another user's desktop within the same windows station, aka the "Desktop Separation" vulnerability...

CVE-2000-0320

Qpopper 2.53 and 3.0 does not properly identify the \n string which identifies the end of message text, which allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 1023 characters long and ends in \n...

CVE-2000-0643

Buffer overflow in WebActive HTTP Server 1.00 allows remote attackers to cause a denial of service via a long URL...

CVE-2000-0751

mopd Maintenance Operations Protocol loader daemon does not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands...

CVE-2000-0130

Buffer overflow in SCO scohelp program allows remote attackers to execute commands...

CVE-2000-0426

UltraBoard 1.6 and other versions allow remote attackers to cause a denial of service by referencing UltraBoard in the Session parameter, which causes UltraBoard to fork copies of itself...

CVE-2000-0765

Buffer overflow in the HTML interpreter in Microsoft Office 2000 allows an attacker to execute arbitrary commands via a long embedded object tag, aka the "Microsoft Office HTML Object Tag" vulnerability...

CVE-2000-0549

CVE-2000-0549 affects Kerberos 4 KDC by not properly checking for null termination in AUTH_MSG_KDC_REQUEST, enabling remote attackers to cause denial of service via a malformed request. The available sources describe the issue as a null-termination handling flaw in the KDC protocol message proces...

CVE-2000-0335

The CVE-2000-0335 issue affects the resolver in glibc 2.1.3 , which uses predictable IDs. This design allows a local attacker to cause DNS query spoofing by manipulating IDs, undermining DNS query integrity. The vulnerability’s impact is described as the ability to spoof results, with a base CVSS...

CVE-2000-0599

CVE-2000-0599 describes a buffer overflow in iMesh 1.02 that allows remote attackers to execute arbitrary commands by sending a long string to the iMesh port. This affects iMesh 1.02; impact as per CVSS: high, with potential partial impact on confidentiality, integrity, and availability. The prov...

CVE-2000-0448

CVE-2000-0448 affects WebShield SMTP Management Tool 4.5.44. The vulnerability is an access-control flaw: the management port is not properly restricted when an IP address does not resolve to a hostname, allowing remote access to the configuration via the GET_CONFIG command. Documentation notes a...

CVE-2000-0635

CVE-2000-0635 concerns the MiniVend shopping cart’s view_page.html. The vulnerability stems from the input to the mv_arg parameter not being properly sanitized, allowing a remote attacker to supply shell metacharacters and execute arbitrary commands on the remote system. The affected component is...

CVE-2000-0661

The CVE-2000-0661 entry concerns WircSrv IRC Server 5.07s, which is vulnerable to a denial of service when a long string is sent to the server port. The available description confirms that remote attackers can trigger a partial availability impact by exploiting this input handling issue. No conne...

CVE-2000-0528

The CVE-2000-0528 entry concerns the Net Tools PKI Server. The issue is that when XUDA template files do not contain absolute pathnames for other files, access is not properly restricted, potentially allowing remote attackers to access restricted resources. The provided documents do not include e...

CVE-2000-0130

CVE-2000-0130 concerns a buffer overflow in the SCO scohelp program that allows remote command execution. The existing sources (NVD/CVE records) confirm the vulnerable component as SCO scohelp and describe the impact as execution of commands by an remote attacker, with a base score of 7.2 (HIGH) ...

CVE-2000-0458

CVE-2000-0458 affects the MSWordView application in IMP, which creates world-readable files in the /tmp directory. This allows other local users to read potentially sensitive information. The publicly reported details indicate a local-privilege-confidentiality exposure due to insecure temporary f...