8781 matches found
CVE-2000-1030
CS&T CorporateTime for the Web returns different error messages for invalid usernames and invalid passwords, which allows remote attackers to determine valid usernames on the server...
CVE-2000-0906
Directory traversal vulnerability in Moreover.com cachedfeed.cgi script version 4.July.00 allows remote attackers to read arbitrary files via a .. dot dot attack on the category or format parameters...
CVE-2000-0916
CVE-2000-0916 is a historical TCP-ISN prediction vulnerability affecting FreeBSD 4.1.1 and earlier (and possibly other BSD-based OSes). The root cause is an insufficient random initial sequence number (ISN) generator, enabling remote attackers to spoof TCP connections. Several connected sources c...
CVE-2000-1008
PalmOS 3.5.2 and earlier uses weak encryption to store the user password, which allows attackers with physical access to the Palm device to decrypt the password and gain access to the device...
CVE-2000-1066
The CVE-2000-1066 entry affects the getnameinfo function in FreeBSD 4.1.1 and earlier (and possibly other operating systems). The vulnerability allows a remote attacker to cause a denial of service by supplying a long DNS hostname. The available documents confirm this DoS impact but do not provid...
CVE-2000-1064
Buffer overflow in the LPD service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service...
CVE-2000-1064
CVE-2000-1064 corresponds to a buffer overflow in the LPD service of HP JetDirect printer card firmware versions x.08.20 and earlier. The vulnerability allows remote attackers to cause a denial of service. The available connected documents do not provide explicit exploit details, affected model i...
CVE-2000-1012
FreeBSD 5.0 and earlier are affected by CVE-2000-1012 due to the catopen function reading files via the LANG environment variable. Local users can read arbitrary files, yielding complete confidentiality and integrity impacts as described in the NVD entry (AV:L/AC:L/Au:N/C:C/I:C/A:C). The vulnerab...
CVE-2000-1035
Buffer overflows in TYPSoft FTP Server 0.78 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long USER, PASS, or CWD command...
CVE-2000-0998
CVE-2000-0998 describes a format-string vulnerability in the top program that allows local attackers to gain root privileges via the kill or renice functions. The connected documents confirm the vulnerability description but do not provide concrete exploitation details, affected product versions,...
CVE-2000-0954
Shambala Server 4.5 stores passwords in plaintext, enabling local users to obtain passwords and compromise the server. The provided documents do not specify remediation or affected versions beyond 4.5; exploitation details are not described.
CVE-2000-0986
CVE-2000-0986 describes a buffer overflow in Oracle 8.1.5 applications (names, namesctl, onrsd, osslogin, tnslsnr, tnsping, trcasst, trcroute) that could allow local users to gain privileges via a long ORACLE_HOME environment variable. The connected documents confirm affected components and the r...
CVE-2000-0940
Metertek pagelog.cgi is affected by a directory traversal vulnerability (CVE-2000-0940). A remote attacker can read arbitrary files by supplying a .. sequence through the name or display parameter. Public documents confirm the CGI module is installed and vulnerable, with the issue described as al...
CVE-2000-0907
CVE-2000-0907 affects EServ 2.92 Build 2982. Remote attackers can exploit long HELO and MAIL FROM commands to cause a denial of service and possibly execute arbitrary commands. The CVSS v2 base score is 7.5 (HIGH), with network access and low attack complexity. The description explicitly states t...
CVE-2000-0817
CVE-2000-0817 affects Microsoft Network Monitor (Netmon) via the HTTP protocol parser. The security issue is a buffer overflow in the HTTP parser when processing malformed data, which could allow a remote attacker to execute arbitrary commands on a vulnerable system. The vulnerability is associat...
CVE-2000-0963
The CVE-2000-0963 vulnerability is a local buffer overflow in the ncurses library that can allow execution of arbitrary commands via overly long environment variables (TERM or TERMINFO_DIRS). Connected PT-2000-1003 and other records specify affected software as ncurses versions 5.0–5.2 and ncurse...
CVE-2000-1015
The CVE-2000-1015 entry concerns Slashcode prior to version 2.0 Alpha, which ships with a default administrative password. The root cause is the presence of this default credential, enabling remote attackers to gain Slashcode privileges and potentially execute arbitrary commands. Documented impac...
CVE-2000-0904
The CVE-2000-0904 entry concerns Voyager Web Server 2.01B (demo disks for QNX 405). The vulnerability arises from the server storing sensitive web client information in the .photon directory within the web document root, enabling remote attackers to retrieve that data. The available documents do ...
CVE-2000-1063
Buffer overflow in the Telnet service of HP JetDirect printer card Firmware (versions x.08.20 and earlier) allows remote attackers to cause a denial of service. The issue is due to a vulnerable Telnet implementation; no exploitation details or patch information are provided in the available docum...