7988 matches found
CVE-2000-0578
SGI MIPSPro compilers C, C++, F77 and F90 generate temporary files in /tmp with predictable file names, which could allow local users to insert malicious contents into these files as they are being compiled by another user...
CVE-2000-0617
The CVE-2000-0617 issue is a buffer overflow in the xconq and cconq game programs on Red Hat Linux that allows local privilege escalation via a long USER environment variable. The connected documents confirm the vulnerable components (xconq/cconq) and the root cause (buffer overflow triggered by ...
CVE-2000-0572
CVE-2000-0572 affects the Razor configuration management tool. The root cause is weak encryption of the password file, enabling local users to gain privileges. CVSS v2 base score 4.6 (Medium); attack vector LOCAL, attack complexity LOW, authentication NONE, with partial impact to confidentiality,...
CVE-2000-0580
CVE-2000-0580 affects Windows 2000 Server. It enables remote denial of service by sending a continuous stream of binary zeros to various TCP/UDP ports, causing significant CPU utilization. The provided documents do not specify a patch, workaround, affected versions beyond Windows 2000 Server, or ...
CVE-2000-0592
The CVE-2000-0592 entry documents a buffer overflow in the POP3 service of WinProxy 2.0 and 2.0.1. The vulnerability arises when processing certain POP3 commands (USER, PASS, LIST, RETR, DELE), enabling remote attackers to potentially execute arbitrary commands. Affected software: WinProxy POP3 s...
CVE-2000-0606
Buffer overflow in kon program in Kanji on Console KON package on Linux may allow local users to gain root privileges via a long -StartupMessage parameter...
CVE-2000-0618
CVE-2000-0618 affects xconq and cconq game programs on Red Hat Linux. A buffer overflow is triggered by a long DISPLAY environment variable, enabling local users to gain additional privileges. The entry lists a CVSS v2 base score of 4.6 (Medium) with local access, low attack complexity, and no au...
CVE-2000-0578
SGI MIPSPro compilers (C, C++, F77, F90) populate /tmp with predictable temporary file names. This allows a local attacker to modify contents of those files while a build is performed by another user, as described in CVE-2000-0578. The vulnerability stems from how temporary files are created duri...
CVE-2000-0605
Summary: CVE-2000-0605 affects Blackboard CourseInfo 4.0. The vulnerability is that local and SQL administrator usernames/passwords are stored in cleartext in a registry key whose ACL allows other users to access the passwords. This leads to potential confidentiality exposure of admin credentials...
CVE-2000-0636
HP JetDirect printers versions G.08.20 and H.08.20 and earlier allow remote attackers to cause a denial of service via a malformed FTP quote command...
CVE-2000-0608
Technical details about CVE-2000-0608 are not publicly available in the provided documents. Monitor for updates.
CVE-2000-0589
SawMill 5.0.21 is affected by a weakness in how it stores passwords, enabling an attacker to decrypt the administrative password and modify the SawMill configuration. The vulnerability stems from weak encryption/hash usage, facilitating information disclosure and potential configuration tampering...
CVE-2000-0606
The CVE describes a buffer overflow in the kon program within Kanji on Console (KON) on Linux. The vulnerability is triggered by a long -StartupMessage parameter in KON, potentially allowing local users to gain root privileges. No versions, affected distributions, or explicit exploit details are ...
DoS in Gamsoft TelSrv telnet server for MS Windows 95/98/NT/2k.
Application: GAMSoft's TelSrv 1.4/1.5 Problem Type: Denial of Service Author: [email protected] Platforms: Windows 95/98/NT/2k Vendor Status: Contacted. Vendor Website: http://www.gamsoft.com Product Description ------------------- TelSrv is superior Telnet server. It provides you with th...
CVE-2000-0567
Buffer overflow in Microsoft Outlook and Outlook Express allows remote attackers to execute arbitrary commands via a long Date field in an email header, aka the "Malformed E-mail Header" vulnerability...
CVE-2000-0627
BlackBoard CourseInfo 4.0 does not properly authenticate users, which allows local users to modify CourseInfo database information and gain privileges by directly calling the supporting CGI programs such as userupdatepasswd.pl and userupdateadmin.pl...
CVE-2000-0626
Buffer overflow in Alibaba web server allows remote attackers to cause a denial of service via a long GET request...
CVE-2000-0625
NetZero 3.0 and earlier uses weak encryption for storing a user's login information, which allows a local user to decrypt the password...