CVE-2000-0586

Dalnet IRC server 4.6.5 is affected by a buffer overflow via the SUMMON command, enabling remote denial of service and potential arbitrary command execution. The provided documents do not specify a patch or remediation; no exploit details are listed. Monitor for updates and verify vendor advisori...

CVE-2000-0599

CVE-2000-0599 describes a buffer overflow in iMesh 1.02 that allows remote attackers to execute arbitrary commands by sending a long string to the iMesh port. This affects iMesh 1.02; impact as per CVSS: high, with potential partial impact on confidentiality, integrity, and availability. The prov...

CVE-2000-0602

CVE-2000-0602 affects Secure Locate (slocate) in Red Hat Linux. Local users can gain privileges through a malformed configuration file referenced by the LOCATE_PATH environment variable, due to improper handling of the config file. The CVSS base score is 4.6 (Medium) with local attack vector and ...

CVE-2000-0604

CVE-2000-0604 involves the gkermit component on Red Hat Linux installed with the setgid uucp bit, enabling local users to modify files owned by uucp. The underlying issue is an improper installation/permission setup of gkermit, which allows a local attacker to gain partial access to files owned b...

CVE-2000-0641

CVE-2000-0641 affects the Savant Web Server (3.1 and earlier) and is linked to multiple vulnerability records in OpenVAS/Nessus indicating a “WWW Too Long URL”/buffer overflow flaw. The available data state that remote attackers could cause the server to execute arbitrary commands via a long GET ...

CVE-2000-0642

The WebActive HTTP Server 1.00 stores the web access log active.log in the document root, allowing remote viewing via direct requests and enabling information disclosure about site visitors. This relies on the default configuration. Remediation guidance from the connected data includes using a di...

CVE-2000-0665

CVE-2000-0665 affects GAMSoft TelSrv 1.4/1.5 (and earlier) Telnet server. A remote attacker can crash the service by sending a long username due to a buffer/printf vulnerability in username handling (stack overflow). Documented references indicate in-the-wild modules and disclosures (Metasploit, ...

CVE-2000-0668

CVE-2000-0668 affects the Linux pam_console PAM module when a display manager (gdm or kdm) has XDMCP enabled. The vulnerability allows a user to access the system console and reboot the system, with a Medium severity (CVSS v2 base score 5.0) and a Partial availability impact. The provided sources...

CVE-2000-0670

CVE-2000-0670 affects CVSWeb 1.80. The cvsweb CGI script allows remote attackers with write access to a CVS repository to execute arbitrary shell commands. This is a local-style attack vector with the attacker authenticated to the CVS repository, and the impact is arbitrary command execution in t...

CVE-2000-0674

CVE-2000-0674 affects the ftp.pl CGI in Virtual Visions' FTP server, allowing remote attackers to read directories outside the document root via a ../ traversal. The vulnerable component is the CGI script handling FTP directory listings (ftp.pl). Impact is information disclosure (directory listin...

CVE-2000-0682

BEA WebLogic 5.1.x is affected by a source-code disclosure vulnerability: inserting /ConsoleHelp/ into a URL can cause the FileServlet to disclose source files. Multiple sources (NVD entry CVE-2000-0682 and OpenVAS/Nessus plugins) describe this WebLogic FileServlet source code disclosure issue. T...

CVE-2000-0684

BEA WebLogic 5.1.x is affected by an access restriction flaw in the JSPServlet. The vulnerability allows remote attackers to compile and execute Java JSP code by directly invoking the JSPServlet on any source file, enabling complete confidentiality and integrity compromise as described by the CVS...

CVE-2000-0718

CVE-2000-0718 affects MandrakeUpdate. A race condition enables local attackers to modify RPM files while they reside in /tmp before installation, compromising file integrity of packages. The NVD entry notes a low base score (1.2) with local attack vector and no confidentiality or availability imp...

CVE-2000-0728

CVE-2000-0728 affects the xpdf PDF viewer client prior to 0.91. The issue is a local file overwrite via a symlink attack, enabling a local user to overwrite arbitrary files. The connected documents do not provide explicit exploit details, mitigations, or patched versions beyond this description. ...

CVE-2000-0767

The vulnerability CVE-2000-0767 is the Scriptlet Rendering issue in the ActiveX control used to invoke a scriptlet in Internet Explorer 4.x/5.x. The ActiveX control renders arbitrary file types instead of HTML, enabling an attacker to read arbitrary files. This entry describes the vulnerability w...

CVE-2000-0501

MDaemon 2.8.5.0 POP server is affected by a race condition that can cause a denial of service when a UIDL command is issued and the server is exited rapidly. The issue is described as a local DoS with partial availability impact and a low CVSS. No exploitation details are provided in the availabl...

CVE-2000-0530

The CVE-2000-0530 entry describes a vulnerability in KDE 1.1.2 where the KApplication-class creates configuration files without proper ownership checks or existence verification. The result is a local privilege-attack risk: a local user can exploit a symlink/ownership flaw to overwrite arbitrary ...

CVE-2000-0624

CVE-2000-0624 describes a buffer overflow in Winamp 2.64 and earlier that can be triggered by a long #EXTINF: extension in an M3U playlist, potentially allowing a remote attacker to execute arbitrary commands. The initial reports do not provide additional technical specifics beyond this descripti...

CVE-2000-0263

CVE-2000-0263 affects the X font server (xfs) on Red Hat Linux 6.x. A malformed request can cause a denial of service, impacting availability (CVSS v2 base score 2.1). Vector: local, low complexity, no authentication required; impact is limited to availability. No explicit remediation details are...

CVE-2000-0478

Norton Antivirus for Exchange (NavExchange) can enter a fail-open state, causing antivirus checks to fail and allowing viruses to pass through the server. The vulnerability, CVE-2000-0478, is documented across CVE/NVD records with a MEDIUM base score on CVSS v2 (AV:N/AC:L/Au:N/C:N/I:P/A:N). The c...