CVE-2000-0346

AppleShare IP 6.1 and later allows a remote attacker to read potentially sensitive information via an invalid range request to the web server...

CVE-2000-0370

The debug option in Caldera Linux smail allows remote attackers to execute commands via shell metacharacters in the -D option for the rmail command...

CVE-2000-0435

The allmanageup.pl file upload CGI script in the Allmanage Website administration software 2.6 can be called directly by remote attackers, which allows them to modify user accounts or web pages...

CVE-2000-0305

Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a denial of service by sending a large number of identical fragmented IP packets, aka jolt2 or the "IP Fragment Reassembly" vulnerability...

CVE-2000-0372

Vulnerability in Caldera rmt command in the dump package 0.4b4 allows a local user to gain root privileges...

CVE-2000-0337

Buffer overflow in Xsun X server in Solaris 7 allows local users to gain root privileges via a long -dev parameter...

CVE-2000-0455

Buffer overflow in xlockmore xlock program version 4.16 and earlier allows local users to read sensitive data from memory via a long -mode option...

CVE-2000-0419

The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthorized activities via the "Show Me" function in Office Help, aka the "Office 2000 UA Control" vulnerability...

CVE-2000-0316

Buffer overflow in Solaris 7 lp allows local users to gain root privileges via a long -d option...

CVE-2000-0480

Dragon telnet server allows remote attackers to cause a denial of service via a long username...

CVE-2000-0359

Buffer overflow in Trivial HTTP THTTPd allows remote attackers to cause a denial of service or execute arbitrary commands via a long If-Modified-Since header...

CVE-2000-0356

Summary: CVE-2000-0356 affects PAM in Red Hat Linux 6.1, where access to disabled NIS accounts is not properly locked. The entry provides no vendor patch/version details or explicit remediation. The CVSSv2 metrics indicate a local, low-complexity flaw with partial confidentiality, integrity, and ...

CVE-2000-0559

The CVE-2000-0559 entry describes a vulnerability in eTrust Intrusion Detection System (formerly SessionWall-3) where administrative passwords stored in the registry are protected with weak XOR encryption. The underlying issue is the weak encryption implementation, enabling a local attacker to de...

CVE-2000-0492

PassWD 1.2 uses weak encryption trivial encoding to store passwords, which allows an attacker who can read the password file to easliy decrypt the passwords...

CVE-2000-0473

Buffer overflow in AnalogX SimpleServer 1.05 allows a remote attacker to cause a denial of service via a long GET request for a program in the cgi-bin directory...

CVE-2000-0262

The CVE-2000-0262 issue affects AVM KEN! ISDN Proxy Server. A malformed request can trigger a denial-of-service, as reported by multiple sources. The Nessus plugin specifies a remote DoS resulting in a crash/segmentation fault when the server is sent a non-HTTP request, and notes that exploitatio...

CVE-2000-0394

CVE-2000-0394 affects NetProwler 3.0. The vulnerability allows remote attackers to cause a denial of service by sending malformed IP packets that trigger NetProwler’s Man-in-the-Middle signature. According to NVD, the exploitability is network-based with low attack complexity and no authenticatio...

CVE-2000-0389

CVE-2000-0389 describes a buffer overflow in the krb_rd_req function used by Kerberos 4 and Kerberos 5, enabling remote attackers to gain root privileges. The vulnerability is evidenced across multiple feeds (NVD, CVE List, Nessus plugin) and linked advisories (CERT CA-2000-06, Bugtraq/archives)....

CVE-2000-0464

CVE-2000-0464 affects Internet Explorer 4.x and 5.x, with a buffer overflow in the ActiveX parameter parsing capability (the “Malformed Component Attribute” vulnerability). The available documents describe remote code execution as the impact but do not provide concrete patch/version details or re...

CVE-2000-0398

The CVE-2000-0398 issue affects Rockliffe MailSite Management Agent, due to a buffer overflow in wconsole.dll that can be triggered by a long query_string parameter in an HTTP GET request. This allows remote attackers to potentially execute arbitrary commands. Public documents identify the vulner...