7988 matches found
CVE-2000-0397
The EMURL web-based email account software encodes predictable identifiers in user session URLs, which allows a remote attacker to access a user's email account...
CVE-2000-0354
mirror 2.8.x in Linux systems allows remote attackers to create files one level above the local target directory...
CVE-2000-0381
The Gossamer Threads DBMan db.cgi CGI script allows remote attackers to view environmental variables and setup information by referencing a non-existing database in the db parameter...
CVE-2000-0018
wmmon in FreeBSD allows local users to gain privileges via the .wmmonrc configuration file...
CVE-2000-0674
ftp.pl CGI program for Virtual Visions FTP browser allows remote attackers to read directories outside of the document root via a .. dot dot attack...
CVE-2000-0432
The CVE-2000-0432 issue affects the calendar CGI scripts by Matt Kruse, specifically calendar_admin.pl, which are susceptible to remote command execution via shell metacharacters. The Nessus entry confirms the vulnerable component as the calendar_admin.pl CGI installed in /cgi-bin, with a well-kn...
CVE-2000-0336
Summary: CVE-2000-0336 affects the OpenLDAP server, where local users can modify arbitrary files via a symlink attack. The root cause described in connected Nessus/Mandrake entries is that OpenLDAP follows symbolic links when creating files, using a default location like /usr/tmp (symlinked to /t...
CVE-2000-0460
CVE-2000-0460 affects KDE kdesud on Linux and is a local privilege-escalation vulnerability caused by a buffer overflow triggered by a long DISPLAY environment variable. The NVD metrics indicate Local attack vector, Low attack complexity, no authentication required, and a base score of 7.2 (HIGH)...
CVE-2000-0264
The CVE-2000-0264 entry concerns Panda Security 3.0 where registry editing is disabled but users can still edit the registry and gain privileges by directly executing a .reg file or via other methods. Specifically, the underlying issue is that the registry can be modified in a context that yields...
CVE-2000-0554
Ceilidh (the affected product) is vulnerable to a remote path disclosure vulnerability where an attacker can obtain the real filesystem path of the Ceilidh directory via the translated_path hidden form field. The CVE description and linked records indicate the vulnerability is exploitable over th...
CVE-2000-0424
The CVE-2000-0424 entry concerns the CGI Counter 4.0.7 (by George Burgyan) and describes remote command execution via shell metacharacters. The connected documents corroborate that the vulnerability arises from improper handling of shell metacharacters in the CGI Counter 4.0.7 interface, enabling...
CVE-2000-0261
The AVM KEN! web server is affected by CVE-2000-0261. The vulnerability is a directory traversal (.. attack) that allows remote attackers to read arbitrary files. Reported impact is partial confidentiality with no impact on integrity or availability. CVSSv2 in the provided data assigns MEDIUM bas...
CVE-2000-0387
CVE-2000-0387 affects the FreeBSD ports golddig makelev program, where local users can overwrite arbitrary files. The vulnerability is a local issue with partial integrity impact and a low base score (2.1). The available documents do not provide exploitation details, affected versions beyond the ...
CVE-2000-0437
CVE-2000-0437 describes a buffer overflow in the CyberPatrol daemon “cyberdaemon” used in the Gauntlet and WebShield products. The flaw could be triggered by network-input and allows remote attackers to cause a denial of service or execute arbitrary commands on affected hosts. The linked Nessus e...
CVE-2000-0352
Technical details about CVE-2000-0352 are not provided in the connected documents. The initial entry lists the Pine vulnerability but no additional specifics. Monitor for updates.
CVE-2000-0261
The AVM KEN! web server allows remote attackers to read arbitrary files via a .. dot dot attack...
CVE-2000-0390
Buffer overflow in krb425convprincipal function in Kerberos 5 allows remote attackers to gain root privileges...
CVE-2000-0479
Dragon FTP server allows remote attackers to cause a denial of service via a long USER command...