8799 matches found
CVE-2000-0971
Avirt Mail 4.0 and 4.2 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long "RCPT TO" or "MAIL FROM" command...
CVE-2000-1185
The CVE-2000-1185 entry concerns the telnet proxy component of the RideWay PN proxy server. According to the description, remote attackers can cause a denial of service by sending a flood of connections containing malformed requests. The primary documented impact is a partial loss of availability...
CVE-2000-1160
The CVE-2000-1160 entry describes a remote DoS against the NAI Sniffer Agent caused by a flood of login requests over the network. Affected product: NAI Sniffer Agent. Vulnerable component/behavior: handling of login requests (root cause not detailed in the provided documents). Impact: Partial lo...
CVE-2000-1188
CVE-2000-1188 : Quikstore Shopping Cart’s CGI (quikstore.cgi) is vulnerable to a directory traversal via the page parameter, enabling remote attackers to read arbitrary files. This aligns with NVD and Nessus notes and is complemented by CERT/CC and CVE history indicating input validation flaws in...
CVE-2000-0963
Buffer overflow in ncurses library allows local users to execute arbitrary commands via long environmental information such as TERM or TERMINFODIRS...
CVE-2000-1127
registrar in the HP resource monitor service allows local users to read and modify arbitrary files by renaming the original registrar.log log file and creating a symbolic link to the target file, to which registrar appends log information and sets the permissions to be world readable...
CVE-2000-1083
The xpshowcolv function in SQL Server and Microsoft SQL Server Desktop Engine MSDE does not properly restrict the length of a buffer before calling the srvparaminfo function in the SQL Server API for Extended Stored Procedures XP, which allows an attacker to cause a denial of service or execute...
CVE-2000-1129
McAfee WebShield SMTP 4.5 is affected. The issue is a vulnerability in SMTP recipient handling where a malformed recipient field can trigger a remote denial of service. Documents confirm the affected product and the attack vector (remote/network) with a partial availability impact; no explicit re...
CVE-2000-1105
The CVE-2000-1105 vulnerability relates to the ixsso.query ActiveX control, which is incorrectly marked safe-for-scripting. CERT details show that Index Server 2.0 and Indexing Service 3.0 expose a web-accessible interface allowing remote attackers to enumerate local files on a Windows 2000 syste...
CVE-2000-0910
Horde library 1.02 allows attackers to execute arbitrary commands via shell metacharacters in the "from" address...
CVE-2000-1168
IBM HTTP Server 1.3.6 based on Apache allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long GET request...
CVE-2000-0973
Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbitrary commands by forcing a long error message to be generated...
CVE-2000-1161
CVE-2000-1161 concerns AdCycle banner management: the build.cgi CGI is left in a web-accessible directory, enabling remote attackers to execute the program and access or delete the AdCycle databases. Connected sources corroborate the issue and describe a remediation: remove build.cgi from /cgi-bi...
CVE-2000-0917
Format string vulnerability in usesyslog function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands...
CVE-2000-1118
24Link 1.06 web server allows remote attackers to bypass access restrictions by prepending strings such as "/+/" or "/." to the HTTP GET request...
CVE-2000-1125
restore 0.4b15 and earlier in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modifying the RSH variable to point to a Trojan horse program...
CVE-2000-1186
CVE-2000-1186 describes a buffer overflow in the phf CGI program that allows remote command execution by supplying a large number of arguments and a long MIME header. The NVD entry lists a-network attack vector, low complexity, no authentication, and partial CIA impact with a base score of 7.5 (H...
CVE-2000-1155
RHDaemon in RobinHood 1.1 web server in BeOS r5 pro and earlier allows remote attackers to cause a denial of service via long HTTP request...
CVE-2000-1138
CVE-2000-1138 affects Lotus Notes R5 client (R5.0.5 and earlier). The issue is that the client does not properly warn users when an S/MIME email message has been modified, allowing an attacker to modify the email in transit without detection. The available documents clearly identify the affected ...