CVE-2000-0342

CVE-2000-0342 (Eudora 4.x) describes a vulnerability where remote attackers can bypass the user warning for executable attachments (.exe, .com, .bat) by using a .lnk file that references the attachment, a.k.a. “Stealth Attachment.” The linked PT-2000-1308 entry confirms the affected software as E...

CVE-2000-0442

CVE-2000-0442 affects qpopper 2.53 and earlier. A formatting string vulnerability in the From: header processed by the UIDL/euidl path allows local users to gain privileges (to group ID mail) and potentially execute arbitrary code. This is supported by multiple sources (NVD entry, FreeBSD VuXML/O...

CVE-2000-0359

thttpd (Trivial HTTP) prior to version 2.05 is affected by a remote buffer overflow triggered by a long If-Modified-Since header. The CVE-2000-0359 entry indicates an overflow that can allow remote code execution or denial of service. Public details in connected documents specify the vulnerable c...

CVE-2000-0034

Netscape 4.7 is affected by CVE-2000-0034: during IMAP/POP sessions, the application records user passwords in the preferences.js file even when “remember passwords” is not enabled. Root cause is password storage in preferences.js, as documented in PT-1999-1842 and echoed in CVE records. Impact i...

CVE-2000-0526

MailStudio 2000 (mailview.cgi) 2.0 and earlier is affected by CVE-2000-0526 via a directory traversal (.. ) attack that allows remote attackers to read arbitrary files. The vulnerability targets the mailview.cgi CGI program and results in partial confidentiality impact. The provided documents do ...

CVE-2000-0236

CVE-2000-0236 affects Netscape Enterprise Server (and related Web Publisher components) where enabling Directory Indexing allows unauthenticated remote attackers to enumerate server directories via published tags such as ?wp-ver-info and ?wp-cs-dump . The vulnerability is triggered by the Web Pub...

CVE-2000-0393

The CVE-2000-0393 issue affects the KDE kscd program. It does not drop privileges when executing a program specified in a user’s SHELL environment variable, allowing a local user to gain privileges by directing kscd to run an alternate program. The description only states the vulnerability; it do...

CVE-2000-0382

The CVE-2000-0382 entry concerns ColdFusion ClusterCATS, where the application appends stale query string arguments to a URL during HTML redirection, potentially exposing sensitive information to the redirected site. This is reflected in the NVD/CVE descriptions (Low severity, CVSS v2: AV:N/AC:H/...

CVE-2000-0461

Technical details for CVE-2000-0461 are not publicly available in the provided documents. Please monitor for updates from official advisories and databases.

CVE-2000-0390

CVE-2000-0390 describes a buffer overflow in the krb425_conv_principal function of Kerberos 5. The vulnerability allows remote attackers to gain root privileges via the affected Kerberos 5 component. Documents identify the root cause as a buffer overflow in the krb425_conv_principal routine, with...

CVE-2000-0195

Corel Linux setxconf is vulnerable when invoked with the -T parameter, which causes the user’s .xserverrc to be executed and enables local privilege escalation to root. This is a local, unauthenticated issue affecting Corel Linux’s setxconf utility; the provided documents do not specify affected ...

CVE-2000-0425

The CVE-2000-0425 describes a buffer overflow in the Web Archives component of L-Soft LISTSERV 1.8, enabling remote attackers to execute arbitrary commands. Affected product: LISTSERV 1.8 (Web Archives component). Root cause: a buffer overflow likely due to improper input handling in the Web Arch...

CVE-2000-0545

The CVE-2000-0545 vulnerability concerns the mailx (Mail) command on Linux where a buffer overflow is triggered by a long -c parameter. Impact is local privilege escalation; exploitation details or specific fixed versions are not provided in the connected documents. No remediation instructions ar...

CVE-2000-0473

CVE-2000-0473 corresponds to a buffer overflow in AnalogX SimpleServer 1.05 that allows remote denial of service via a long GET request to a program in the cgi-bin directory. The issue is exploitable over the network with low access complexity; impact is Partial confidentiality/integrity/availabi...

CVE-2000-0547

Technical details (affected software, root cause, patch) are not provided in the supplied documents; monitor for updates.

CVE-2000-0251

HP-UX 11.04 VirtualVault (VVOS) is affected by CVE-2000-0251. The issue involves VVOS sending data to unprivileged processes via an interface that has multiple aliased IP addresses. This exposes sensitive data to unprivileged processes, with the documented impact indicating partial integrity comp...

CVE-2000-0339

ZoneAlarm Personal Firewall (Windows) versions 2.1.10 and earlier fail to monitor UDP traffic with a source port of 67, allowing remote attackers to bypass firewall rules. This vulnerability (CVE-2000-0339) is documented by OpenVAS/Nessus entries noting a bypass of the ruleset and recommending up...

CVE-2000-0370

CVE-2000-0370 affects Caldera Linux smail. The debug option allows remote command execution via shell metacharacters in the -D option for rmail, enabling full compromise of confidentiality, integrity, and availability (CVSSv2 base score 10.0). Exploitation details are not provided in the availabl...

CVE-2000-0337

CVE-2000-0337 describes a buffer overflow in the Xsun X server component of Solaris 7. The vulnerability allows local users to gain root privileges by supplying an excessively long -dev parameter. The available documents identify the affected system as Solaris 7 and the vulnerable component as th...

CVE-2000-0030

CVE-2000-0030 affects Solaris dmispd dmi_cmd, allowing a local user to exhaust restricted disk space by adding files to /var/dmi/db. The NVD entry lists a MEDIUM base score (5.0) with availability impact and no confidentiality/integrity impact, and indicates a local-access condition despite the C...