8777 matches found
CVE-2000-0795
Buffer overflow in lpstat in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long -n option...
CVE-2000-0751
mopd Maintenance Operations Protocol loader daemon does not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands...
CVE-2000-0769
O'Reilly WebSite Pro 2.3.7 installs the uploader.exe program with execute permissions for all users, which allows remote attackers to create and execute arbitrary files by directly calling uploader.exe...
CVE-2000-0729
FreeBSD 5.x, 4.x, and 3.x allows local users to cause a denial of service by executing a program with a malformed ELF image header...
CVE-2000-0827
This CVE (CVE-2000-0827) documents a buffer overflow in the web authorization form of Mobius DocumentDirect for the Internet 1.2. The vulnerability is triggered by a long username and could lead to denial of service or arbitrary command execution. The connected documents corroborate the affected ...
CVE-2000-0828
CVE-2000-0828 describes a buffer overflow in Mobius DocumentDirect for the Internet 1.2 ’s ddicgi.exe . An attacker can trigger arbitrary command execution by sending a specially long User-Agent header, i.e., a remote code execution vulnerability. The entry lists a network attack vector with a hi...
CVE-2000-0828
Buffer overflow in ddicgi.exe in Mobius DocumentDirect for the Internet 1.2 allows remote attackers to execute arbitrary commands via a long User-Agent parameter...
CVE-2000-0843
Buffer overflow in pamsmb and pamntdom pluggable authentication modules PAM allow remote attackers to execute arbitrary commands via a login with a long user name...
CVE-2000-0833
Buffer overflow in WinSMTP 1.06f and 2.X allows remote attackers to cause a denial of service via a long 1 USER or 2 HELO command...
CVE-2000-0855
SunFTP build 9(1) is affected by a denial-of-service vulnerability: remote attackers can cause a crash or service disruption by connecting to the server and disconnecting before sending a newline. The CVE entry provides the basic impact and trigger, but there are no additional details in the conn...
CVE-2000-0866
Interbase 6 SuperServer for Linux allows an attacker to cause a denial of service via a query containing 0 bytes...
CVE-2000-0836
Buffer overflow in CamShot WebCam Trial2.6 allows remote attackers to execute arbitrary commands via a long Authorization header...
CVE-2000-0845
kdebug daemon kdebugd in Digital Unix 4.0F allows remote attackers to read arbitrary files by specifying the full file name in the initialization packet...
CVE-2000-0842
CVE-2000-0842 affects the UnixWare 7 scohelphttp webserver. The vulnerability is in the search97cgi/vtopic component, where a path traversal via a .. (dot dot) attack could allow remote attackers to read arbitrary files. The available connected sources (NVD, CVE listings) confirm the affected pro...
CVE-2000-0855
SunFTP build 91 allows remote attackers to cause a denial of service by connecting to the server and disconnecting before sending a newline...
CVE-2000-0835
The CVE-2000-0835 issue affects Sambar Server 4.4 Beta 3 where the search.dll ISAPI Search utility allows remote reading of arbitrary directories by supplying a directory path in the query parameter. This causes information disclosure (confidentiality impact) without integrity or availability dis...
CVE-2000-0881
The dccscan setuid program in LPPlus does not properly check if the user has the permissions to print the file that is specified to dccscan, which allows local users to print arbitrary files...
CVE-2000-1214
Buffer overflows in the 1 outpack or 2 buf variables of ping in iputils before 20001010, as distributed on Red Hat Linux 6.2 through 7J and other operating systems, may allow local users to gain privileges...
CVE-2000-0843
Summary (CVE-2000-0843): Buffer overflow in pam_smb and pam_ntdom PAM modules can be triggered by a long username, enabling remote attackers to execute arbitrary commands. Connected Nessus data notes the overflow could allow an intruder to run arbitrary commands as root on the host, indicating a ...
CVE-2000-0879
CVE-2000-0879: LPPlus programs dccsched, dcclpdser, dccbkst, dccshut, dcclpdshut, and dccbkstshut are installed setuid root and world‑executable, which allows arbitrary local users to start and stop various LPD services. The provided documents do not include exploitation details or remediation in...