CVE-2000-0376

CVE-2000-0376 affects i-drive Filo: when the setup installs an HTTP proxy server, an attacker can send an overly long HTTP GET request, overflowing a heap buffer and enabling remote code execution. Affected: Filo 1.0.0.1 for Windows NT (SP5). Mitigation: upgrade to Filo 1.5.3. The vulnerability i...

CVE-2000-0395

CVE-2000-0395 is a reported buffer overflow in CProxy 3.3 that allows remote users to cause a denial of service by sending a long HTTP request. The entry specifies a network attack vector and a low-to-moderate base score (MEDIUM) with availability impact. The connected documents confirm the vulne...

CVE-2000-0331

CVE-2000-0331 affects Microsoft CMD.EXE on Windows NT and Windows 2000. The vulnerability is a buffer overflow caused by a long environment variable, enabling a local user to cause a denial of service. The available documents provide the root cause and impact but do not specify a remediation or p...

CVE-2000-0011

Technical details about CVE-2000-0011 are not publicly available in the provided connected documents. Monitor for updates from official advisories to obtain affected versions, impact, and remediation information.

CVE-2000-0439

Vulnerability: Internet Explorer 4.0/5.0. Issue: malicious site can obtain cookies from another domain by embedding that domain name with escaped characters in a URL (Unauthorized Cookie Access). Root cause: cross-domain cookie access via crafted URL. Impact: potential leakage of cookies across d...

CVE-2000-0363

Linux cdwtools 093 and earlier contain a local privilege escalation vulnerability: local users can gain root privileges via the /tmp directory. The issue is described across CVE-2000-0363 records and NVD, with a base score of 6.2 (MEDIUM). Exploitation details are not provided in the supplied doc...

CVE-2000-0455

CVE-2000-0455: A buffer overflow in the xlockmore xlock program (versions 4.16 and earlier) allows local users to read sensitive data from memory via a long -mode option. Affected component is xlockmore; root cause is a memory safety overrun in handling the -mode argument. Impact documented as pa...

CVE-2000-0305

CVE-2000-0305 describes a remote DoS in Windows 95/98/2000/NT4/Terminal Server caused by sending large numbers of identical fragmented IP packets (the jolt2/IP Fragment Reassembly issue). The vulnerability arises from IP fragment processing and has been associated with Microsoft hotfix MS00-029 (...

CVE-2000-0361

The CVE-2000-0361 issue affects wvdial 1.4 and earlier, where the PPP wvdial.lxdialog script creates a .config file with world-readable permissions. This allows a local attacker who is in the dialout group to access login credentials stored in that file. The available connected sources confirm th...

CVE-2000-0334

CVE-2000-0334 affects the Allaire Spectra container editor preview tool. The issue arises from improper enforcement of object security, permitting an attacker to perform unauthorized activities through an object-method added to the container object via a publishing rule. The documented impact is ...

CVE-2000-0379

The CVE-2000-0379 entry concerns the Netopia R9100 router, where authenticated users can modify SNMP tables even when the administrator has disabled this capability. According to the NVD entry, the vulnerability has a CVSS base score of 3.6 (LOW) with LOCAL attack vector, low complexity, and no a...

CVE-2000-0168

CVE-2000-0168 affects the Microsoft Windows 9x family. The vulnerability arises when a pathname contains MS-DOS device names (e.g., CON\CON, AUX, etc.), which can cause a denial of service (system freeze/reboot) when accessed via certain services. OpenVAS-derived entries describe exploitation pat...

CVE-2000-0438

CVE-2000-0438 describes a buffer overflow in the Linux fdmount utility that can be triggered by a long mountpoint parameter. Local users in the floppy group could execute arbitrary commands with the exploit. The vulnerability is due to an inadequate bound check in fdmount, leading to potential co...

CVE-2000-0418

Vulnerability (CVE-2000-0418) affects Cayman gateways, including the Cayman 3220-H DSL router, due to handling of oversized ICMP echo (ping) requests. Remote attackers can cause a denial of service by sending oversized ping packets. Exploitation details in the connected documents indicate affecte...

CVE-2000-0405

The CVE-2000-0405 entry affects L0pht AntiSniff and describes a buffer overflow in the way it handles DNS responses. A malformed DNS response packet could allow remote attackers to execute arbitrary commands on the affected system. The root cause is the overflow in the DNS-response processing pat...

CVE-2000-0424

The CGI counter 4.0.7 by George Burgyan allows remote attackers to execute arbitrary commands via shell metacharacters...

CVE-2000-0487

The Protected Store in Windows 2000 does not properly select the strongest encryption when available, which causes it to use a default of 40-bit encryption instead of 56-bit DES encryption, aka the "Protected Store Key Length" vulnerability...

CVE-2000-0018

The provided documents identify CVE-2000-0018 as affecting FreeBSD's wmmon, where local users can gain privileges via the .wmmonrc configuration file. The root cause is not fully detailed beyond the configuration file-based escalation path, and the materials do not specify affected versions, exac...

CVE-2000-0380

Cisco IOS HTTP server on affected Cisco routers/switches (IOS 11.1–12.1) is vulnerable to a denial-of-service via a GET request to a URL containing the characters %% in the HTTP path. The underlying issue, as documented by Cisco and multiple security resources, is a defect that can cause the devi...

CVE-2000-0564

The vulnerability CVE-2000-0564 affects the guestbook CGI in the ICQ Web Front service (ICQ 2000a, 99b). The flaw permits remote denial of service when a URL with an excessively long name parameter is requested. Exploitation details are not provided in the documents; no patch/version remediation ...