CVE-2000-0076

Summary: CVE-2000-0076 affects the nviboot boot script in the Debian nvi package. Local users can delete files through malformed entries in vi.recover. The available records confirm the affected component (nviboot in Debian nvi), the underlying cause (malformed vi.recover entries) and the impact ...

CVE-2000-0594

BitchX IRC client does not properly cleanse an untrusted format string, which allows remote attackers to cause a denial of service via an invite to a channel whose name includes special formatting characters...

CVE-2000-0610

NetWin dMailWeb and cwMail 2.6g and earlier are affected by a vulnerability that allows remote attackers to bypass authentication and relay mail through the server by supplying a username that contains a carriage return. This entry is documented in CVE-2000-0610 with an NVD base score of 5.0 (Med...

CVE-2000-0703

suidperl aka sperl does not properly cleanse the escape sequence "!" before calling /bin/mail to send an error report, which allows local users to gain privileges by setting the "interactive" environmental variable and calling suidperl with a filename that contains the escape sequence...

CVE-2000-0225

The Pocsag POC32 program does not properly prevent remote users from accessing its server port, even if the option has been disabled...

CVE-2000-0591

CVE-2000-0591 affects Novell BorderManager 3.0 and 3.5. The vulnerability enables remote attackers to bypass URL filtering by encoding characters in the requested URL, allowing policy evasion. The provided documents do not specify the root cause details, affected subcomponents, exploit availabili...

CVE-2000-0765

CVE-2000-0765 describes a buffer overflow in the HTML interpreter of Microsoft Office 2000 . An attacker could trigger the overflow via a long embedded object tag in HTML, allowing execution of arbitrary commands. The sources provide the vulnerability description but do not specify affected versi...

CVE-2000-0446

Buffer overflow in MDBMS database server allows remote attackers to execute arbitrary commands via a long string...

CVE-2000-0779

CVE-2000-0779 : Check Point FireWall-1 with the RSH/REXEC setting enabled is vulnerable to remote bypass of access controls via malformed RSH/REXEC connection requests. The root cause is improper handling of certain RSH/REXEC-related data (stderr handling) that allows bypass of restrictions. All ...

CVE-2000-0674

CVE-2000-0674 affects the ftp.pl CGI in Virtual Visions' FTP server, allowing remote attackers to read directories outside the document root via a ../ traversal. The vulnerable component is the CGI script handling FTP directory listings (ftp.pl). Impact is information disclosure (directory listin...

CVE-2000-0780

The CVE-2000-0780 entry concerns the IPSWITCH IMail web server (versions 6.04 and earlier) vulnerable to a directory-traversal (dot-dot) attack that allows remote attackers to read and delete arbitrary files. The vulnerability is described as affecting the web server component, with impact descri...

CVE-2000-0761

CVE-2000-0761 affects the OS/2 Warp 4.5 FTP server. The vulnerability allows a remote attacker to cause a denial of service by sending a long username. The root cause is implied to be improper input handling that leads to resource exhaustion. The provided documents do not specify a vendor patch, ...

CVE-2000-0705

CVE-2000-0705 : ntop running in web mode is vulnerable to a directory-traversal attack using ".." that enables remote attackers to read arbitrary files. The described impact is partial confidentiality, with no available details on exploitation status or a confirmed fix in the provided documents. ...

CVE-2000-0682

BEA WebLogic 5.1.x is affected by a source-code disclosure vulnerability: inserting /ConsoleHelp/ into a URL can cause the FileServlet to disclose source files. Multiple sources (NVD entry CVE-2000-0682 and OpenVAS/Nessus plugins) describe this WebLogic FileServlet source code disclosure issue. T...

CVE-2000-0675

Technical details (affected product/version, root cause, impact, or fixes) are not publicly provided in the supplied documents; monitor for updates.

CVE-2000-0673

The CVE-2000-0673 issue affects NetBIOS Name Server (NBNS) where the protocol lacks authentication, allowing remote attackers to cause a denial of service by sending spoofed Name Conflict or Name Release datagrams. Documented impact is DoS on affected hosts, e.g., NetBIOS name resolution disrupti...

CVE-2000-0670

CVE-2000-0670 affects CVSWeb 1.80. The cvsweb CGI script allows remote attackers with write access to a CVS repository to execute arbitrary shell commands. This is a local-style attack vector with the attacker authenticated to the CVS repository, and the impact is arbitrary command execution in t...

CVE-2000-0669

The CVE-2000-0669 entry describes a vulnerability in Novell NetWare 5.0 where remote attackers can cause a denial of service by flooding port 40193 with random data. The available sources confirm NetWare 5.0 as affected and indicate the impact as a partial availability disruption, with no informa...

CVE-2000-0664

CVE-2000-0664 affects AnalogX SimpleServer:WWW 1.06 and earlier. A remote attacker can read arbitrary files via a modified dot-dot traversal using %2E URL encoding for the dots in requests to the server. The vulnerability is documented in multiple sources (NVD/CVE records, Nessus plugin) with rem...

CVE-2000-0660

CVE-2000-0660 affects the WDaemon web server for WorldClient 2.1, allowing remote attackers to read arbitrary files through a directory-traversal (..). The underlying issue is improper handling of path components, enabling unauthorized file access. Exploitation details are not provided in the CVE...