CVE-2000-0879

CVE-2000-0879: LPPlus programs dccsched, dcclpdser, dccbkst, dccshut, dcclpdshut, and dccbkstshut are installed setuid root and world‑executable, which allows arbitrary local users to start and stop various LPD services. The provided documents do not include exploitation details or remediation in...

CVE-2000-0845

CVE-2000-0845 affects Digital Unix 4.0F: the kdebugd daemon allows remote attackers to read arbitrary files by specifying the full path in the initialization packet. Exploitation status and remediation details are not provided in the supplied documents.

CVE-2000-0833

CVE-2000-0833 affects WinSMTP 1.06f and 2.X, where a buffer overflow can be triggered by long USER or HELO commands, allowing remote attackers to cause a denial of service. The available records confirm the vulnerable components and the attack vectors, with no public details about a patch in the ...

CVE-2000-0857

The CVE concerns muh 2.05d IRC server where the logging capability does not properly cleanse user-injected format strings. Root cause: improper handling of format strings in nicknames, enabling remote attackers to cause a denial of service and potentially execute arbitrary commands through a malf...

CVE-2000-0872

explorer.php in PhotoAlbum 0.9.9 allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2000-0812

The CVE-2000-0812 entry concerns Sun Java Web Server; the admin module is vulnerable to remote code execution. An attacker can upload Java code to the module and trigger the com.sun.server.http.pagecompile.jsp92.JspServlet by requesting a URL starting with /servlet/, enabling execution of arbitra...

CVE-2000-0872

CVE-2000-0872 affects PhotoAlbum 0.9.9. The vulnerability is a path traversal in explorer.php that allows remote attackers to read arbitrary files via a .. (dot dot) sequence. This is a direct file-disclosure issue, enabling access to non-public data on the server where PhotoAlbum is hosted. The ...

CVE-2000-0828

CVE-2000-0828 describes a buffer overflow in Mobius DocumentDirect for the Internet 1.2 ’s ddicgi.exe . An attacker can trigger arbitrary command execution by sending a specially long User-Agent header, i.e., a remote code execution vulnerability. The entry lists a network attack vector with a hi...

CVE-2000-0836

CVE-2000-0836 affects CamShot WebCam Trial2.6. The vulnerability is a buffer overflow in the Authorization header that allows remote attackers to execute arbitrary commands. The CVSS metrics indicate a network, low complexity, no authentication requirement, with partial impact on confidentiality,...

CVE-2000-0832

CVE-2000-0832 affects the htgrep CGI script. The issue is an information-disclosure vulnerability: remote attackers can read arbitrary files by supplying a full pathname in the hdr parameter via the web server, exposing sensitive data. The vulnerability is exploitable over network through the htg...

CVE-2000-0841

XMail POP3 server is vulnerable to a buffer overflow in the APOP command when processing long inputs, affecting versions before 0.59. This can allow a remote attacker to execute arbitrary commands (with some sources noting potential root-level impact). The connected documents provide vulnerabilit...

CVE-2000-0881

The CVE-2000-0881 issue affects the LPPlus dccscan setuid program. The root cause is insufficient permission checks to verify a user’s authorization to print the target file, enabling local users to print arbitrary files. This is a local-privilege/authorization bypass scenario with potential info...

CVE-2000-0880

The CVE-2000-0880 entry concerns LPPlus creating the lpdprocess file with world-writable permissions, which allows local users to kill arbitrary processes by specifying a process ID and using the setuid dcclpdshut program to terminate the specified process. Impact is local access and partial inte...

CVE-2000-0840

XMail POP3 server (versions before 0.59) is vulnerable to a buffer overflow triggered by a long USER argument. The issue can allow an attacker to remotely execute commands on the affected host, with reports indicating possible code execution as root. The vulnerability is tied to the APOP/USER han...

CVE-2000-0842

The search97cgi/vtopic" in the UnixWare 7 scohelphttp webserver allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2000-0882

CVE-2000-0882 affects Intel Express 500 series switches. The vulnerability allows a remote attacker to trigger a Denial of Service by sending a malformed ICMP packet, causing the switch CPU to crash. The available sources (NVD/NIST CVE listing) confirm the affected product and impact as described...

CVE-2000-0836

Buffer overflow in CamShot WebCam Trial2.6 allows remote attackers to execute arbitrary commands via a long Authorization header...

CVE-2000-0831

The CVE-2000-0831 entry describes a buffer overflow in Fastream FTP++ 2.0 triggered by a long username, allowing remote denial of service and possibly arbitrary command execution. The vulnerability affects the FTP++ 2.0 server’s username handling logic, with the impact stated as partial confident...

CVE-2000-0866

Interbase 6 SuperServer for Linux is affected by a denial of service vulnerability triggered by a query containing 0 bytes. The incident is described as a local attack that can cause availability impact without requiring authentication or user interaction. The provided documents do not specify a ...

CVE-2000-0826

Mobius DocumentDirect for the Internet 1.2 is affected by CVE-2000-0826 due to a buffer overflow in ddicgi.exe. The vulnerability enables a remote attacker to execute arbitrary commands by sending a long GET request to the web server hosting ddicgi.exe. OpenVAS/Nessus entries confirm the existenc...