CVE-2000-1098

The CVE-2000-1098 entry concerns the web server component of the SonicWALL SOHO firewall. A remote attacker can cause a denial of service by sending an empty GET or POST request, impacting availability (CVSS: Network vector, low complexity, no authentication, partial availability impact). Public ...

CVE-2000-1155

The CVE-2000-1155 entry affects the RHDaemon component of the RobinHood 1.1 web server running on BeOS R5 Pro and earlier. The root cause is a crafted, long HTTP request that can cause a denial of service. Public details across connected sources confirm the affected product/version and the vulner...

CVE-2000-1154

RHConsole in RobinHood 1.1 web server for BeOS r5 Pro and earlier is affected. Affected component: RHConsole/web server; vulnerability allows remote attackers to cause a denial of service via a long HTTP request. The description specifies DoS impact but provides no details on root cause, versions...

CVE-2000-0946

Compaq Easy Access Keyboard software 1.3 does not properly disable access to custom buttons when the screen is locked, which could allow an attacker to gain privileges or execute programs without authorization...

CVE-2000-1118

CVE-2000-1118 affects 24Link 1.06 web server. An attacker can bypass access restrictions by prepending a path like "/+"/"." to the HTTP GET, causing unauthorized access. Root cause: improper handling of path prefixes in request parsing. Impact per CVSS: PARTIAL confidentiality, integrity, and ava...

CVE-2000-1087

The CVE-2000-1087 vulnerability affects Microsoft SQL Server 2000 and MSDE, where the xp_proxiedmetadata function fails to properly restrict buffer length before invoking srv_paraminfo in the Extended Stored Procedures API. This can allow a local attacker to cause a denial of service or execute a...

CVE-2000-1157

The CVE-2000-1157 entry concerns the NAI Sniffer Agent, where a vulnerability exists in the handling of SNMP community names that can cause a buffer overflow. This leads to the possibility of remote command execution over the network by unauthenticated attackers, as indicated by the description o...

CVE-2000-1087

The xpproxiedmetadata function in Microsoft SQL Server 2000 and SQL Server Desktop Engine MSDE does not properly restrict the length of a buffer before calling the srvparaminfo function in the SQL Server API for Extended Stored Procedures XP, which allows an attacker to cause a denial of service ...

CVE-2000-1127

The CVE-2000-1127 entry concerns the registrar component of the HP Resource Monitor service. A local attacker can read and modify arbitrary files by renaming the original registrar.log and creating a symbolic link to a target file; the registrar process then appends log data to that link and sets...

CVE-2000-1159

NAI Sniffer Agent allows remote attackers to gain privileges on the agent by sniffing the initial UDP authentication packets and spoofing commands...

CVE-2000-0898

CVE-2000-0898 affects Small HTTP Server 2.01. The issue is improper handling of Server Side Includes (SSI) tags containing null values, allowing local users and possibly remote attackers to crash the server by inserting an SSI into an HTML file. The NVD data indicates partial impact to availabili...

CVE-2000-1152

CVE-2000-1152 concerns the BeOS Browser IRC client on BeOS r5 Pro and earlier. The issue is a denial-of-service triggered by a message containing a long URL, which the description indicates could be exploited remotely. The connected documents do not provide additional technical details on the vul...

CVE-2000-1114

Unify ServletExec AS v3.0C allows remote attackers to read source code for JSP pages via an HTTP request that ends with characters such as ".", or "+", or "%20"...

CVE-2000-1183

CVE-2000-1183 concerns a buffer overflow in a Socks5 server running on Linux. The vulnerability arises in the Socks5 server’s handling of long connection requests, which can overflow a buffer and allow an attacker to execute arbitrary commands. The available connected documents confirm the vulner...

CVE-2000-0929

Microsoft Windows Media Player 7 allows attackers to cause a denial of service in RTF-enabled email clients via an embedded OCX control that is not closed properly, aka the "OCX Attachment" vulnerability...

CVE-2000-0918

Format string vulnerability in kvt in KDE 1.1.2 may allow local users to execute arbitrary commands via a DISPLAY environmental variable that contains formatting characters...

CVE-2000-0985

Buffer overflow in All-Mail 1.1 allows remote attackers to execute arbitrary commands via a long "MAIL FROM" or "RCPT TO" command...

CVE-2000-0967

PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands by triggering error messages that are improperly written to the error logs...

CVE-2000-1159

CVE-2000-1159 affects the NAI Sniffer Agent. The vulnerability allows remote attackers to gain privileges on the agent by sniffing the initial UDP authentication packets and spoofing commands. The NVD entry assigns a base score of 7.5 (HIGH) with network attack vector, low attack complexity, and ...

CVE-2000-1105: Undefined Security Weakness

The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site operators to embed a script that remotely determines the existence of files on visiting Windows 2000 systems that have Indexing Services enabled...