CVE-2000-1054

Buffer overflow in CSAdmin module in CiscoSecure ACS Server 2.42 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a large packet...

CVE-2000-1113

Buffer overflow in Microsoft Windows Media Player allows remote attackers to execute arbitrary commands via a malformed Active Stream Redirector .ASX file, aka the ".ASX Buffer Overrun" vulnerability...

CVE-2000-1006

CVE-2000-1006 affects Microsoft Exchange Server 5.5 and relates to vulnerable MIME header handling when a blank charset is specified (charset=""). The issue allows a remote attacker to cause a denial-of-service condition by sending malformed MIME headers. The vulnerability is associated with Exch...

CVE-2000-1038

The CVE-2000-1038 entry concerns the IBM AS/400 Firewall web administration interface. It states that remote attackers can cause a Denial of Service via an empty GET request. The NVD metrics show a Network attack vector with low complexity and no authentication, resulting in Partial availability ...

CVE-2000-0080

AIX techlibss allows local users to overwrite files via a symlink attack...

CVE-2000-0672

The default configuration of Jakarta Tomcat does not restrict access to the /admin context, which allows remote attackers to read arbitrary files by directly calling the administrative servlets to add a context for the root directory...

CVE-2000-1096

crontab by Paul Vixie uses predictable file names for a temporary file and does not properly ensure that the file is owned by the user executing the crontab -e command, which allows local users with write access to the crontab spool directory to execute arbitrary commands by creating...

CVE-2000-1146

Recourse ManTrap 1.6 allows attackers to cause a denial of service via a sequence of commands that navigate into and out of the /proc/self directory and executing various commands such as ls or pwd...

CVE-2000-0900

Directory traversal vulnerability in ssi CGI program in thttpd 2.19 and earlier allows remote attackers to read arbitrary files via a "%2e%2e" string, a variation of the .. dot dot attack...

CVE-2000-0255

The CVE-2000-0255 entry affects the Nbase-Xyplex EdgeBlaster router. The vulnerability arises when an attacker performs a scan for the FormMail CGI program, which can cause a denial of service. Documented impact is network-based, with availability impact described as PARTIAL. The provided sources...

CVE-2000-0762

CVE-2000-0762 affects the default installation of eTrust Access Control (formerly SeOS). The vulnerability arises because the product uses a default encryption key, enabling remote attackers to spoof the eTrust administrator and escalate privileges. The available documents do not specify affected...

CVE-2000-0862

The vulnerability CVE-2000-0862 affects the Allaire Spectra 1.0.1 product, specifically its administrative interface utility. The exposed issue allows remote attackers to read and modify sensitive configuration information. The NVD entry lists a CVSS v2 base score of 6.4 (Medium) with network acc...

CVE-2000-1043

Format string vulnerability in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root privileges when ypserv is built without a vsyslog function...

CVE-2000-0967

CVE-2000-0967 affects PHP 3 and PHP 4 where user-supplied format strings are not properly sanitized in error log messages, enabling remote command execution via crafted error output. The vulnerability applies to PHP installations that log errors/warnings (format-string attacks via syslog/vsnprint...

CVE-2000-1181

The CVE-2000-1181 issue affects RealNetworks RealServer 7 and earlier, where an HTTP request to /admin/includes/ discloses parts of the server’s memory contents (potentially including credentials and tokens). The root cause is memory contents disclosure via an accessible admin path, enabling remo...

CVE-2000-0783

Watchguard Firebox II is affected by CVE-2000-0783 where a remote attacker can cause a denial of service by sending a malformed URL to the authentication service on port 4100. The available sources (NVD, CVE list) describe the vulnerable component as the authentication service and the trigger via...

CVE-2000-0912

The CVE-2000-0912 entry concerns the MultiHTML CGI script (multihtml.pl). Affected component: the multihtml.pl CGI. The underlying issue is a traversal/file-access vulnerability where the attacker can specify the file name via the multi parameter, enabling reading of arbitrary files on the remote...

CVE-2000-1058

Buffer overflow in OverView5 CGI program in HP OpenView Network Node Manager NNM 6.1 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, in the SNMP service snmp.exe, aka the "Java SNMP MIB Browser Object ID parsing problem."...

CVE-2000-1045

nssldap earlier than 121, when run with nscd name service caching daemon, allows remote attackers to cause a denial of service via a flood of LDAP requests...

CVE-2000-0341

The CVE-2000-0341 entry concerns ATRIUM Cassandra NNTP Server 1.10. The connected Nessus plugin and CVE listings indicate a remote buffer overflow in the AUTHINFO USER handling: providing a long login name can crash the server and, per the plugin, could allow remote code execution. This is a netw...