CVE-2000-0955

CVE-2000-0955 affects Cisco Virtual Central Office 4000 (VCO/4K). The issue is weak encryption used to store usernames and passwords in the SNMP MIB, enabling an attacker who knows the community name to crack credentials and gain privileges. According to the NVD entry, this yields a CVSS v2 base ...

CVE-2000-1078

CVE-2000-1078 affects the ICQ Web Front HTTPd. A remote attacker can cause a denial of service by requesting a URL that contains a "?" character. The CVE is corroborated by NVD: ICQ Web Front HTTPd denial of service via a URL with a question mark. Nessus mentions a specific DoS payload involving ...

CVE-2000-0903

CVE-2000-0903 concerns a directory traversal vulnerability in the Voyager web server 2.01B bundled with the QNX 405 demo disks. The issue allows remote attackers to read arbitrary files by performing a dot-dot (.. ) traversal. The affected component is the Voyager web server; root cause is improp...

CVE-2000-0987

Buffer overflow in oidldapd in Oracle 8.1.6 allow local users to gain privileges via a long "connect" command line parameter...

CVE-2000-0906

The CVE-2000-0906 entry concerns Moreover.com’s cached_feed.cgi script (version 4.July.00). The vulnerability is a directory traversal flaw that allows remote attackers to read arbitrary files by supplying a .. (dot dot) payload in the category or format parameters. The available sources (NVD/NVD...

CVE-2000-1023

CVE-2000-1023 concerns the Alabanza Control Panel. The vulnerability arises because the nsManager.cgi CGI program does not require passwords to access administrative commands, enabling remote attackers to modify domain name information. Connected scan entries (Nessus/OpenVAS) reference this CVE a...

CVE-2000-1046

The CVE-2000-1046 issue affects Lotus Domino ESMTP service (5.0.2c and earlier). It describes multiple buffer overflows that could be triggered by long RCPT TO, SAML FROM, or SOML FROM commands, leading to denial of service and possibly remote code execution. The NVD entry assigns a base score of...

CVE-2000-0971

Avirt Mail 4.0 and 4.2 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long "RCPT TO" or "MAIL FROM" command...

CVE-2000-1017

The CVE-2000-1017 entry concerns Webteachers Webdata (WebData database). The vulnerability allows remote attackers who have valid WebData accounts to read arbitrary files by submitting a request to import a file into the WebData database. The description specifies the attack flow but does not pro...

CVE-2000-1008

PalmOS 3.5.2 and earlier uses weak encryption to store the user password, allowing attackers with physical access to decrypt the password and gain access to the device. The vulnerability affects the password storage mechanism and is exploitable only with local access; no exploit details or mitiga...

CVE-2000-1030

CS&T CorporateTime for the Web is vulnerable to user enumeration: it returns different error messages for invalid usernames vs invalid passwords, allowing remote attackers to determine valid usernames on the server. Root cause is inconsistent authentication error handling; impact is partial confi...

CVE-2000-1028

CVE-2000-1028 describes a buffer overflow in the HP-UX 11.0 cu program that may allow local users to gain privileges through a long -l command line argument. The vulnerability is local and occurs due to an unchecked or improperly sized argument input, enabling privilege escalation if exploited. N...

CVE-2000-1020

CVE-2000-1020 describes a heap overflow in Worldclient of MDaemon (versions 3.1.1 and earlier) that can be triggered by a long URL, allowing remote attackers to cause a denial of service and potentially execute arbitrary commands. The issue is exploitable over the network without authentication, ...

CVE-2000-0817

Buffer overflow in the HTTP protocol parser for Microsoft Network Monitor Netmon allows remote attackers to execute arbitrary commands via malformed data, aka the "Netmon Protocol Parsing" vulnerability...

CVE-2000-0988

WinU 1.0–5.1 is affected by a backdoor password that enables remote attackers to access the administrative interface and modify configuration. The NVD entry describes an unauthenticated, remote-access flaw that provides complete administration capability without user interaction, enabling modific...

CVE-2000-0885

Buffer overflows in Microsoft Network Monitor Netmon allow remote attackers to execute arbitrary commands via a long Browser Name in a CIFS Browse Frame, a long SNMP community name, or a long username or filename in an SMB session, aka the "Netmon Protocol Parsing" vulnerability. NOTE: It is high...

CVE-2000-0916

FreeBSD 4.1.1 and earlier, and possibly other BSD-based OSes, uses an insufficient random number generator to generate initial TCP sequence numbers ISN, which allows remote attackers to spoof TCP connections...

CVE-2000-0954

Shambala Server 4.5 stores passwords in plaintext, which could allow local users to obtain the passwords and compromise the server...

CVE-2000-0905

QNX Embedded Resource Manager (Voyager web server 2.01B on QNX 405 demo disks) is affected. Remote attackers can read sensitive system statistics via embedded.html. The CVE entry (CVE-2000-0905) has a NVD base score of 5.0 (Medium). No explicit remediation or patch information is provided in the ...

CVE-2000-0918

The CVE-2000-0918 entry describes a format string vulnerability in KDE's kvt component (version 1.1.2) that may allow local users to execute arbitrary commands via a DISPLAY environment variable containing formatting characters. The affected software is KDE 1.1.2; root cause is unsafe format-stri...