8799 matches found
CVE-2000-0817
Buffer overflow in the HTTP protocol parser for Microsoft Network Monitor Netmon allows remote attackers to execute arbitrary commands via malformed data, aka the "Netmon Protocol Parsing" vulnerability...
CVE-2000-1103
rcvtty in BSD 3.0 and 4.0 does not properly drop privileges before executing a script, which allows local attackers to gain privileges by specifying an alternate Trojan horse script on the command line...
CVE-2000-1160
NAI Sniffer Agent allows remote attackers to cause a denial of service crash by sending a large number of login requests...
CVE-2000-1105
The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site operators to embed a script that remotely determines the existence of files on visiting Windows 2000 systems that have Indexing Services enabled...
CVE-2000-0907
EServ 2.92 Build 2982 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long HELO and MAIL FROM commands...
CVE-2000-0932
MAILsweeper for SMTP 3.x does not properly handle corrupt CDA documents in a ZIP file and hangs, which allows remote attackers to cause a denial of service...
CVE-2000-0951
A misconfiguration in IIS 5.0 with Index Server enabled and the Index property set allows remote attackers to list directories in the web root via a Web Distributed Authoring and Versioning WebDAV search...
CVE-2000-0990
cmd5checkpw 0.21 and earlier allows remote attackers to cause a denial of service via an "SMTP AUTH" command with an unknown username...
CVE-2000-0887
named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making a compressed zone transfer ZXFR request and performing a name service query on an authoritative record that is not cached, aka the "zxfr bug."...
CVE-2000-0938
Samba Web Administration Tool SWAT in Samba 2.0.7 supplies a different error message when a valid username is provided versus an invalid name, which allows remote attackers to identify valid users on the server...
CVE-2000-1110
document.d2w CGI program in the IBM Net.Data db2www package allows remote attackers to determine the physical path of the web server by sending a nonexistent command to the program...
CVE-2000-1093
AOL Instant Messenger contains buffer overflow vulnerabilities in the AIM URI handler and command-line/URI parsing that can be triggered by a long goim/aim request, allowing remote execution of arbitrary commands on affected clients. The issue affects AIM before 4.3.2229; exploitation can crash t...
CVE-2000-0810
Auction Weaver 1.0 through 1.04 does not properly validate the names of form fields, which allows remote attackers to delete arbitrary files and directories via a .. dot dot attack...
CVE-2000-1130
CVE-2000-1130 affects McAfee WebShield SMTP 4.5. An attacker can bypass email content filtering rules by using extended ASCII characters in the attachment name, enabling partial confidentiality/integrity impact as indicated by the record. The vulnerability description provided by multiple sources...
CVE-2000-0984
The HTTP server in Cisco IOS 12.0 through 12.1 allows local users to cause a denial of service crash and reload via a URL containing a "?/" string...
CVE-2000-0992
Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. dot dot attack...
CVE-2000-1114
The CVE-2000-1114 vulnerability affects Unify ServletExec AS v3.0C. A flaw in the HTTP handling allows remote attackers to read JSP source code by sending an HTTP request that ends with certain characters (e.g., ".", "+", or "%20"). This can expose source contents and partial confidentiality leak...
CVE-2000-1175
CVE-2000-1175 describes a buffer overflow in Koules 1.4 that allows local users to execute arbitrary commands via a long command line argument. The affected product is Koules 1.4; the root cause is a buffer overflow triggered by long command-line input, enabling local privilege execution with a b...