7988 matches found
CVE-2000-0406
The CVE-2000-0406 entry describes: Netscape Communicator before 4.73 and Navigator 4.07 do not properly validate SSL certificates, enabling remote attackers to redirect traffic to a malicious server (Acros-Suencksen SSL) and potentially steal data. No remediation or exploit details are provided i...
CVE-2000-0509
CVE-2000-0509 affects Sambar Server 4.3, specifically the finger and whois demonstration scripts. A buffer overflow triggered by a long hostname allows remote attackers to execute arbitrary commands. The connected documents do not provide a patch/version fix; no exploitation details are listed. T...
CVE-2000-0334
The Allaire Spectra container editor preview tool does not properly enforce object security, which allows an attacker to conduct unauthorized activities via an object-method that is added to the container object with a publishing rule...
CVE-2000-0545
Buffer overflow in mailx mail command aka Mail on Linux systems allows local users to gain privileges via a long -c carbon copy parameter...
CVE-2000-0476
xterm, Eterm, and rxvt allow an attacker to cause a denial of service by embedding certain escape characters which force the window to be resized...
CVE-2000-0416
NTMail 5.x contains a vulnerability where network users can bypass proxy restrictions by redirecting requests to NTMail’s web configuration server. Affected product is NTMail 5.x; root cause is improper handling of proxy rules allowing redirection to configuration server. Documented impact: bypas...
CVE-2000-0311
Technical details for CVE-2000-0311 are not publicly available in the provided documents. Monitor for updates.
CVE-2000-0371
Technical details for CVE-2000-0371 are not publicly available in the provided documents. The materials here reiterate that the libmediatool library used by KDE mediatool can allow local symlink-based file creation. Monitor for updates.
CVE-2000-0360
INN buffer overflow (CVE-2000-0360) affects INN servers prior to 2.2.2, where the remote server fails to perform proper bounds checking, allowing a remote attacker to crash the service by sending a maliciously formatted news article. Public sources (NVD/Nessus/OpenVAS) corroborate a remote DoS ri...
CVE-2000-0304
Summary: CVE-2000-0304 affects Microsoft IIS 4.0 and 5.0 when the IISADMPWD virtual directory is installed. A malformed request to inetinfo.exe (the undelimited .HTR request) can cause a remote denial of service. What is affected: IIS 4.0 and, to a lesser extent, IIS 5.0; presence of IISADMPWD is...
CVE-2000-0045
CVE-2000-0045 affects MySQL: local users can modify passwords for arbitrary MySQL users via the GRANT privilege. The vulnerability is documented in CVE/NVD with a base score of 6.4 (MEDIUM). Connected documents confirm the issue but do not provide explicit affected versions or remediation details...
CVE-2000-0303
Quake3 Arena is affected by CVE-2000-0303 due to a path traversal (dot dot) vulnerability that enables a malicious server operator to read or modify files on a client. The issue, described in the NVD entry, indicates a network-accessible vector with low attack complexity and no authentication req...
CVE-2000-0407
The provided documents identify CVE-2000-0407 as a local-privilege escalation vulnerability in the Solaris netpr service caused by a buffer overflow via an excessively long -p option. The root cause is a buffer overflow in the netpr program. The materials do not specify affected product versions,...
CVE-2000-0362
CVE-2000-0362: Buffer overflows in Linux cdwtools 0.93 and earlier allow local users to gain root privileges. The initial description states the affected product and impact; no further technical specifics (root cause details, vulnerable versions beyond 0.93, exploitation method, or mitigations) a...
CVE-2000-0546
The CVE-2000-0546 entry concerns the Kerberos 4 KDC. The vulnerability is a buffer overflow in the KDC’s set_tgtkey function triggered by the lastrealm variable, leading to remote denial of service. Affected component: Kerberos 4 KDC (set_tgtkey). Impact is described as denial of service via netw...
CVE-2000-0354
CVE-2000-0354 affects mirror 2.8.x on Linux; remote attackers can create files one level above the local target directory. Impact: partial integrity impact via a network vector with low complexity and no authentication. No remediation details are provided in the supplied documents.
CVE-2000-0399
The CVE-2000-0399 entry concerns the MDaemon POP3 server. A buffer overflow in the POP server allows remote attackers to crash the service by sending a too-long user name, resulting in a denial of service. Affected component: MDaemon POP3 server (remote input to user field). Impact: remote DoS wi...
Excel 2000 vulnerability - executing programs
Georgi Guninski security advisory 15, 2000 Excel 2000 vulnerability - executing programs Systems affected: Excel 2000/Win98 - almost sure other versions/OSes, have not tested Risk: High Disclaimer: The opinions expressed in this advisory and program are my own and not of any company. The usual...
