8799 matches found
CVE-2000-0922
Directory traversal vulnerability in Bytes Interactive Web Shopper shopping cart program shopper.cgi 2.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot attack on the newpage parameter...
CVE-2000-0905
QNX Embedded Resource Manager in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read sensitive system statistics information via the embedded.html web page...
CVE-2000-0956
cyrus-sasl before 1.5.24 in Red Hat Linux 7.0 does not properly verify the authorization for a local user, which could allow the users to bypass specified access restrictions...
CVE-2000-0947
Format string vulnerability in cfd daemon in GNU CFEngine before 1.6.0a11 allows attackers to execute arbitrary commands via format characters in the CAUTH command...
CVE-2000-1153
PostMaster 1.0 in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL...
CVE-2000-0885
Buffer overflows in Microsoft Network Monitor Netmon allow remote attackers to execute arbitrary commands via a long Browser Name in a CIFS Browse Frame, a long SNMP community name, or a long username or filename in an SMB session, aka the "Netmon Protocol Parsing" vulnerability. NOTE: It is high...
CVE-2000-1102
The CVE-2000-1102 entry concerns PTlink IRCD 3.5.3 and PTlink Services 1.8.1. The connected records specify that remote attackers can trigger a denial-of-service (server crash) by sending the commands "mode +owgscfxeb" and "oper". The NVD entry notes a partial availability impact with a medium ba...
CVE-2000-0962
The IPSEC implementation in OpenBSD 2.7 does not properly handle empty AH/ESP packets, which allows remote attackers to cause a denial of service...
CVE-2000-0967
PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands by triggering error messages that are improperly written to the error logs...
CVE-2000-1159
CVE-2000-1159 affects the NAI Sniffer Agent. The vulnerability allows remote attackers to gain privileges on the agent by sniffing the initial UDP authentication packets and spoofing commands. The NVD entry assigns a base score of 7.5 (HIGH) with network attack vector, low attack complexity, and ...
CVE-2000-1175
CVE-2000-1175 describes a buffer overflow in Koules 1.4 that allows local users to execute arbitrary commands via a long command line argument. The affected product is Koules 1.4; the root cause is a buffer overflow triggered by long command-line input, enabling local privilege execution with a b...
CVE-2000-1172
CVE-2000-1172 affects Gaim (formerly a...); specifically version 0.10.3 and earlier using the OSCAR protocol. The issue is a buffer overflow triggered by a long HTML tag in received messages, leading to remote denial of service and potentially arbitrary code execution. Exploitation details are no...
CVE-2000-1102
PTlink IRCD 3.5.3 and PTlink Services 1.8.1 allow remote attackers to cause a denial of service server crash via "mode +owgscfxeb" and "oper" commands...
CVE-2000-1129
McAfee WebShield SMTP 4.5 allows remote attackers to cause a denial of service via a malformed recipient field...
CVE-2000-0978
bbd server in Big Brother System and Network Monitor before 1.5c2 allows remote attackers to execute arbitrary commands via the "&" shell metacharacter...
CVE-2000-0933
The Input Method Editor IME in the Simplified Chinese version of Windows 2000 does not disable access to privileged functionality that should normally be restricted, which allows local users to gain privileges, aka the "Simplified Chinese IME State Recognition" vulnerability...
CVE-2000-0888
named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by sending an SRV record to the server, aka the "srv bug."...
CVE-2000-0898
Small HTTP Server 2.01 does not properly process Server Side Includes SSI tags that contain null values, which allows local users, and possibly remote attackers, to cause the server to crash by inserting the SSI into an HTML file...