CVE-2000-0304

Microsoft IIS 4.0 and 5.0 with the IISADMPWD virtual directory installed allows a remote attacker to cause a denial of service via a malformed request to the inetinfo.exe program, aka the "Undelimited .HTR Request" vulnerability...

CVE-2000-0408

IIS 4.05 and 5.0 allow remote attackers to cause a denial of service via a long, complex URL that appears to contain a large number of file extensions, aka the "Malformed Extension Data in URL" vulnerability...

CVE-2000-0554

Ceilidh allows remote attackers to obtain the real path of the Ceilidh directory via the translatedpath hidden form field...

CVE-2000-0350

A debugging feature in NetworkICE ICEcap 2.0.23 and earlier is enabled, which allows a remote attacker to bypass the weak authentication and post unencrypted events...

CVE-2000-0405

The CVE-2000-0405 entry affects L0pht AntiSniff and describes a buffer overflow in the way it handles DNS responses. A malformed DNS response packet could allow remote attackers to execute arbitrary commands on the affected system. The root cause is the overflow in the DNS-response processing pat...

CVE-2000-0452

The CVE-2000-0452 entry pertained to the Lotus Domino Server 5.0.1 ESMTP service. A buffer overflow can be triggered by a long MAIL FROM command, potentially causing a denial of service. Some connected sources additionally note this vulnerability could allow execution of arbitrary code on the rem...

CVE-2000-0334

CVE-2000-0334 affects the Allaire Spectra container editor preview tool. The issue arises from improper enforcement of object security, permitting an attacker to perform unauthorized activities through an object-method added to the container object via a publishing rule. The documented impact is ...

CVE-2000-0564

The vulnerability CVE-2000-0564 affects the guestbook CGI in the ICQ Web Front service (ICQ 2000a, 99b). The flaw permits remote denial of service when a URL with an excessively long name parameter is requested. Exploitation details are not provided in the documents; no patch/version remediation ...

CVE-2000-0414

The CVE-2000-0414 entry describes a local privilege escalation in HP-UX 11.X/10.X caused by a flaw in the shutdown command’s handling of input variables. A local attacker could exploit malformed input to gain elevated privileges. The available sources confirm the affected component (shutdown comm...

CVE-2000-0544

CVE-2000-0544 affects Windows NT and Windows 2000 hosts due to malformed DCE/RPC SMBwriteX requests carrying an invalid data length, enabling a remote attacker to cause a denial of service. The connected Nessus plugin MS00-066 indicates a patch (hotfix Q272303) addressing this issue; the descript...

CVE-2000-0418

Vulnerability (CVE-2000-0418) affects Cayman gateways, including the Cayman 3220-H DSL router, due to handling of oversized ICMP echo (ping) requests. Remote attackers can cause a denial of service by sending oversized ping packets. Exploitation details in the connected documents indicate affecte...

CVE-2000-0463

BeOS 5.0 is affected by CVE-2000-0463. The vulnerability allows remote denial of service via fragmented TCP packets, as described in the CVE entry. The connected documents corroborate the BeOS 5.0 DoS impact but do not provide additional technical details, affected subcomponents, exploit vectors,...

CVE-2000-0157

NetBSD ptrace call on VAX allows local users to gain privileges by modifying the PSL contents in the debugging process...

CVE-2000-0463

BeOS 5.0 allows remote attackers to cause a denial of service via fragmented TCP packets...

CVE-2000-0437

Buffer overflow in the CyberPatrol daemon "cyberdaemon" used in gauntlet and WebShield allows remote attackers to cause a denial of service or execute arbitrary commands...

CVE-2000-0509

Buffer overflows in the finger and whois demonstration scripts in Sambar Server 4.3 allow remote attackers to execute arbitrary commands via a long hostname...

CVE-2000-0462

ftpd in NetBSD 1.4.2 does not properly parse entries in /etc/ftpchroot and does not chroot the specified users, which allows those users to access other files outside of their home directory...

CVE-2000-0435

Technical details for CVE-2000-0435 are not publicly available in the provided documents. Monitor for updates and new technical information.

CVE-2000-0361

The CVE-2000-0361 issue affects wvdial 1.4 and earlier, where the PPP wvdial.lxdialog script creates a .config file with world-readable permissions. This allows a local attacker who is in the dialout group to access login credentials stored in that file. The available connected sources confirm th...

CVE-2000-0331

CVE-2000-0331 affects Microsoft CMD.EXE on Windows NT and Windows 2000. The vulnerability is a buffer overflow caused by a long environment variable, enabling a local user to cause a denial of service. The available documents provide the root cause and impact but do not specify a remediation or p...