CVE-2000-0454

Buffer overflow in Linux cdrecord allows local users to gain privileges via the dev parameter...

CVE-2000-0439

Vulnerability: Internet Explorer 4.0/5.0. Issue: malicious site can obtain cookies from another domain by embedding that domain name with escaped characters in a URL (Unauthorized Cookie Access). Root cause: cross-domain cookie access via crafted URL. Impact: potential leakage of cookies across d...

CVE-2000-0438

CVE-2000-0438 describes a buffer overflow in the Linux fdmount utility that can be triggered by a long mountpoint parameter. Local users in the floppy group could execute arbitrary commands with the exploit. The vulnerability is due to an inadequate bound check in fdmount, leading to potential co...

CVE-2000-0032

Solaris dmi_cmd vulnerability CVE-2000-0032 allows local users to crash the dmispd daemon by placing a malformed file in /var/dmi/db. The description does not provide exploit details, affected versions, or remediation. No additional technical details are given in the connected documents. Actionab...

CVE-2000-0168

CVE-2000-0168 affects the Microsoft Windows 9x family. The vulnerability arises when a pathname contains MS-DOS device names (e.g., CON\CON, AUX, etc.), which can cause a denial of service (system freeze/reboot) when accessed via certain services. OpenVAS-derived entries describe exploitation pat...

CVE-2000-0381

CVE-2000-0381 affects the Gossamer Threads DBMan DBMan CGI script (db.cgi). The vulnerability arises when a non-existent database is referenced via the db parameter, allowing remote attackers to view environment variables and setup information (server information leakage). The OpenVAS NASL entrie...

CVE-2000-0531

CVE-2000-0531 : Linux gpm program vulnerability where local users can cause a denial of service by flooding the /dev/gpmctl device with STREAM sockets. The NVD entry shows a LOCAL attack vector, LOW base severity, and PARTIAL availability impact; no remediation or workaround details are provided ...

CVE-2000-0379

The CVE-2000-0379 entry concerns the Netopia R9100 router, where authenticated users can modify SNMP tables even when the administrator has disabled this capability. According to the NVD entry, the vulnerability has a CVSS base score of 3.6 (LOW) with LOCAL attack vector, low complexity, and no a...

CVE-2000-0527

The CVE-2000-0527 entry concerns the MailStudio 2000 (and earlier) product where the CGI program userreg.cgi is vulnerable. An attacker could remotely execute arbitrary commands by injecting shell metacharacters, enabling full compromise of affected systems. The provided sources consistently desc...

CVE-2000-0011

Technical details about CVE-2000-0011 are not publicly available in the provided connected documents. Monitor for updates from official advisories to obtain affected versions, impact, and remediation information.

CVE-2000-0487

CVE-2000-0487 : The Protected Store in Windows 2000 does not properly select the strongest available encryption, defaulting to 40-bit instead of 56-bit DES. The description confirms a weak encryption fallback, with referenced advisory MS00-032. No exploitation details are provided in the initial ...

CVE-2000-0350

CVE-2000-0350 affects NetworkICE ICEcap up to version 2.0.23. The issue is a debugging feature that remains enabled, allowing a remote attacker to bypass weak authentication and post unencrypted events. Public sources in connected documents corroborate that ICEcap stores/receives alerts and can b...

CVE-2000-0303

Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot .. attack...

CVE-2000-0304

Summary: CVE-2000-0304 affects Microsoft IIS 4.0 and 5.0 when the IISADMPWD virtual directory is installed. A malformed request to inetinfo.exe (the undelimited .HTR request) can cause a remote denial of service. What is affected: IIS 4.0 and, to a lesser extent, IIS 5.0; presence of IISADMPWD is...

CVE-2000-0432

The CVE-2000-0432 issue affects the calendar CGI scripts by Matt Kruse, specifically calendar_admin.pl, which are susceptible to remote command execution via shell metacharacters. The Nessus entry confirms the vulnerable component as the calendar_admin.pl CGI installed in /cgi-bin, with a well-kn...

CVE-2000-0406

The CVE-2000-0406 entry describes: Netscape Communicator before 4.73 and Navigator 4.07 do not properly validate SSL certificates, enabling remote attackers to redirect traffic to a malicious server (Acros-Suencksen SSL) and potentially steal data. No remediation or exploit details are provided i...

CVE-2000-0476

GNOME VTE before 0.76.3 allows a denial of service (memory consumption) via a window resize escape sequence, a related issue to CVE-2000-0476. Connected sources show this affects vte291 (TencentOS TencentOS Server 4 advisory) and is mirrored in Amazon Linux 2 advisories (ALAS2-2024-2610, ALAS-202...

CVE-2000-0492

CVE-2000-0492 concerns PassWD 1.2, where passwords are stored with weak, trivially decodable encryption. The vulnerability occurs because the password file can be read and the stored passwords decrypted due to the weak encoding. Affected component: PassWD 1.2 password storage. Root cause: use of ...

CVE-2000-0311

Technical details for CVE-2000-0311 are not publicly available in the provided documents. Monitor for updates.

CVE-2000-0261

The AVM KEN! web server is affected by CVE-2000-0261. The vulnerability is a directory traversal (.. attack) that allows remote attackers to read arbitrary files. Reported impact is partial confidentiality with no impact on integrity or availability. CVSSv2 in the provided data assigns MEDIUM bas...