Проблема с Desktop'ами в Windows 2000

При определенных условиях локальный пользователь может обратиться к виртуальным desktop'ам открытых с других машин, и просмотреть/изменить какую-либо информацию...

CVE-2000-0479

Dragon FTP server allows remote attackers to cause a denial of service via a long USER command...

CVE-2000-0480

Dragon telnet server allows remote attackers to cause a denial of service via a long username...

CVE-2000-0420

The default configuration of SYSKEY in Windows 2000 stores the startup key in the registry, which could allow an attacker tor ecover it and use it to decrypt Encrypted File System EFS data...

CVE-2000-0385

FileMaker Pro 5 Web Companion allows remote attackers to bypass Field-Level database security restrictions via the XML publishing or email capabilities...

CVE-2000-0401

Buffer overflows in redirect.exe and changepw.exe in PDGSoft shopping cart allow remote attackers to execute arbitrary commands via a long query string...

CVE-2000-0429

A backdoor password in Cart32 3.0 and earlier allows remote attackers to execute arbitrary commands...

CVE-2000-0412

CVE-2000-0412 affects the Napster-era clients (gnapster/knapster). The vulnerability allows a remote attacker to read arbitrary files on the client by specifying full pathnames, due to improper restriction to MP3 files. The NVD entry assigns a CVSSv2 base score of 7.5 (HIGH) with network attack v...

CVE-2000-0422

CVE-2000-0422 : Buffer overflow in the Netwin DMailWeb CGI program allows remote attackers to execute arbitrary commands via a long utoken parameter. Affected component: Netwin DMailWeb CGI. Impact: arbitrary command execution; no patch/mitigation details are provided in the supplied documents. E...

CVE-2000-0423

The CVE-2000-0423 entry describes a vulnerability in Netwin DNEWSWEB CGI where a buffer overflow allows remote attackers to execute arbitrary commands by supplying long values for parameters such as group, cmd, and utag. Affected component is the DNEWSWEB CGI program; root cause is a buffer overf...

CVE-2000-0449

CVE-2000-0449 : Omnis Studio 2.4 uses weak encryption (trivial encoding) to protect database fields. The provided metrics assign a 10.0 base score (HIGH) with network attack vector and complete impact to confidentiality, integrity, and availability. No exploitation details, specific fixes, or rem...

CVE-2000-0413

The vulnerability CVE-2000-0413 affects the FrontPage Server Extensions shtml.exe component in IIS 4.0/5.0. A remote attacker can trigger an error by requesting a non-existent HTML/HTM/ASP/SHTML file, causing the server to reveal the local absolute path of the web root in the error message. This ...

CVE-2000-0386

The CVE-2000-0386 entry concerns FileMaker Pro 5 Web Companion, where remote attackers can send anonymous or forged email. The provided documents confirm this description but do not include deeper root-cause, affected versions, exploit details, or remediation. No explicit fix/version information ...

CVE-2000-0434

The CVE-2000-0434 issue concerns the Allmanage web site administration software. The underlying problem is that the administrative password is stored in plaintext in a file that could be accessed by remote attackers. This creates the potential for an attacker to obtain the password and gain unaut...

CVE-2000-0383

CVE-2000-0383 concerns AOL Instant Messenger’s file transfer component disclosing the sender’s local file path to the recipient. The CERT/CC entry notes this as an exposure that could enable privacy/security inferences about the sender’s machine. The description in CVE records this behavior; vend...

CVE-2000-0475

Windows 2000 allows a local user process to access another user's desktop within the same windows station, aka the "Desktop Separation" vulnerability...

CVE-2000-0444

HP Web JetAdmin 6.0 allows remote attackers to cause a denial of service via a malformed URL to port 8000...

CVE-2000-0386

FileMaker Pro 5 Web Companion allows remote attackers to send anonymous or forged email...

CVE-2000-0444

HP Web JetAdmin 6.0 is affected. The vulnerability is a remote denial-of-service caused by a malformed URL targeting port 8000. Root cause described as malformed URL handling; no additional exploit details or affected versions beyond the 6.0 release are provided in the documents. No remediation o...

CVE-2000-0420

CVE-2000-0420 concerns Windows 2000 SYSKEY: the default SYSKEY configuration stores the startup key in the registry, which could allow an attacker with local access to recover the key and decrypt EFS data. The linked records reiterate the vulnerability description and do not provide exploit code ...