CVE-2000-0704

CVE-2000-0704 affects SGI WorldView (Omron Wnn) on IRIX. A root-level buffer overflow in the WorldView WNN server can be triggered remotely by sending oversized JS_OPEN, JS_MKDIR, or JS_FILE_INFO commands, allowing arbitrary commands execution with root privileges on vulnerable installations wher...

CVE-2000-0696

The CVE-2000-0696 entry concerns the dwhttpd web server’s administration interface in Solaris AnswerBook2 . The vulnerability arises because the admin interface does not properly authenticate requests to its supporting CGI scripts, enabling a remote attacker to add user accounts by directly invok...

CVE-2000-0689

Account Manager LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the amadmin.pl script with the setpasswd parameter...

CVE-2000-0713

CVE-2000-0713 describes a buffer overflow in Adobe Acrobat 4.05 family products (Acrobat/Reader/Business Tools/Fill In) related to handling PDF CID fonts via long /Registry and /Ordering specifiers. The underlying flaw is unchecked bounds during processing of these entries, enabling arbitrary cod...

CVE-2000-0691

The faxrunq and faxrunqd in the mgetty package allows local users to create or modify arbitrary files via a symlink attack which creates a symlink in from /var/spool/fax/outgoing/.lastrun to the target file...

CVE-2000-0723

Helix GNOME Updater helix-update 0.5 and earlier does not properly create /tmp directories, which allows local users to create empty system configuration files such as /etc/config.d/bashrc, /etc/config.d/csh.cshrc, and /etc/rc.config...

CVE-2000-0760

The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp extension...

CVE-2000-0755

Vulnerability CVE-2000-0755 affects HP-UX 11.00 in the newgrp command, enabling local privilege escalation. The connected records confirm the affected product (HP-UX 11.00) and the vulnerable component (newgrp), with the impact described as local privilege gain. The exact root cause, exploitation...

CVE-2000-0696

The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests to its supporting CGI scripts, which allows remote attackers to add user accounts to the interface by directly calling the admin CGI script...

CVE-2000-0789

The CVE-2000-0789 entry targets WinU 5.x and earlier. The vulnerability arises because the product stores its configuration password with weak encryption, enabling local users to decrypt the password and gain privileges. This is based on the NVD/CVE descriptions indicating weak encryption used fo...

CVE-2000-0789

WinU 5.x and earlier uses weak encryption to store its configuration password, which allows local users to decrypt the password and gain privileges...

CVE-2000-0709

The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to cause a denial of service in some components by requesting a URL whose name includes a standard DOS device name...

CVE-2000-0687

CVE-2000-0687 affects Auction Weaver CGI script LITE (1.0–1.04). A directory traversal flaw in the catdir parameter allows remote attackers to read arbitrary files. The vulnerability is remotely exploitable and was reported for UNIX and Windows NT platforms. The issue arises in versions 1.0 throu...

CVE-2000-0774

The CVE-2000-0774 entry concerns Bajie HTTP web server 0.30a, where the sample Java servlet “test” discloses the real pathname of the web document root. The vulnerability is an information disclosure in which an ordinary request to the test servlet reveals server-side directory paths. The connect...

CVE-2000-0724

CVE-2000-0724 involves the go-gnome Helix GNOME pre-installer. The vulnerability arises from a symlink attack in /tmp that lets local users overwrite arbitrary files, including uudecode, snarf, and some installer files. The described impact is complete confidentiality, integrity, and availability...

CVE-2000-0701

The vulnerability CVE-2000-0701 affects the Mailman project’s wrapper program in versions 2.0beta3 and 2.0beta4. The root cause is improper cleansing of untrusted format strings, which permits local privilege escalation. The NVD entry lists local attack vector with low complexity and partial impa...

CVE-2000-0715

DiskCheck script diskcheck.pl in Red Hat Linux 6.2 allows local users to create or overwrite arbitrary files via a symlink attack on a temporary file...

CVE-2000-0715

Summary (CVE-2000-0715) : The vulnerability affects Red Hat Linux 6.2’s DiskCheck script (diskcheck.pl), a Powertools utility that alerts on near-capacity disks. Diskcheck.pl creates a temporary file in /tmp with a predictable name and runs with elevated privileges (setuid root). An attacker can ...

CVE-2000-0688

Subscribe Me LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the subscribe.pl script with the setpwd parameter...

CVE-2000-0714

The CVE-2000-0714 issue concerns umb-scheme 3.2-11 for Red Hat Linux, which is installed with world-writable files. This local-access vulnerability arises from permissions allowing modification of files by any user, potentially compromising integrity and confidentiality of affected components. Th...