7988 matches found
CVE-2000-0383
The file transfer component of AOL Instant Messenger AIM reveals the physical path of the transferred file to the remote recipient...
CVE-2000-0401
PDGSoft Shopping Cart vulnerability (CVE-2000-0401) affects redirect.exe and changepw.exe. The issue is remote buffer overflows that allow an attacker to execute arbitrary commands via a long query string, potentially leading to data disclosure or privilege escalation on the web server. Exploitat...
CVE-2000-0385
FileMaker Pro Web Companion (5.0v3 and earlier) exposes data by bypassing Field-Level Security via XML publishing or email, allowing unauthorized access. The CERT entry confirms attackers can read data thought protected. Remediation: upgrade to FileMaker Pro 5.0v4 or later as described by FileMak...
CVE-2000-0450
Technical details (affected product, version, root cause, impact, remediation) are not publicly provided in the supplied documents. Monitor for updates.
CVE-2000-0384
NetStructure 7110 and 7180 are affected by an authentication issue due to undocumented accounts (servnow, root, wizard) whose passwords can be inferred from the device MAC address. Remote attackers could gain root access. The description in the CVE matches the vendor-agnostic details: a hard-to-j...
CVE-2000-0429
CVE-2000-0429 concerns Cart32 3.0 and earlier. The vulnerability is a backdoor password in cart32.exe (password: ‘wemilo’) that allows a remote attacker to execute arbitrary commands in the web server context and potentially access credit card information. An additional path concern is that the a...
CVE-2000-0433
CVE-2000-0433 affects the SuSE aaa_base package. The description states that it installs some system accounts with home directories set to /tmp, enabling local users to gain privileges by creating standard user startup scripts such as profiles. The CVSSv2 vector (LOCAL, LOW complexity, NONE authe...
CVE-2000-0415
Outlook Express 4.x is affected by a buffer overflow triggered by mail/news messages with a .jpg or .bmp attachment having a long filename. The vulnerability is reported to allow denial of service. The connected documents corroborate the issue as described for Outlook Express 4.x; no specific exp...
CVE-2000-0543
The command port for PGP Certificate Server 2.5.0 and 2.5.1 allows remote attackers to cause a denial of service if their hostname does not have a reverse DNS entry and they connect to port 4000...
CVE-2000-0514
GSSFTP FTP daemon in Kerberos 5 1.1.x does not properly restrict access to some FTP commands, which allows remote attackers to cause a denial of service, and local users to gain root privileges...
CVE-2000-0471
Buffer overflow in ufsrestore in Solaris 8 and earlier allows local users to gain root privileges via a long pathname...
CVE-2000-0478
In some cases, Norton Antivirus for Exchange NavExchange enters a "fail-open" state which allows viruses to pass through the server...
CVE-2000-0542
Tigris remote access server before 11.5.4.22 does not properly record Radius accounting information when a user fails the initial login authentication but subsequently succeeds...
Apache for Windows Multiple Forward Slash Directory Listing
Certain versions of Apache for Win32 have a bug wherein remote users can list directory entries. Specifically, by appending multiple /'s to the HTTP GET command, the remote Apache server will list all files and subdirectories within the web root as defined in httpd.conf. %NASLMINLEVEL 70300 This...
CVE-2000-0535
OpenSSL 0.9.4 and OpenSSH for FreeBSD do not properly check for the existence of the /dev/random or /dev/urandom devices, which are absent on FreeBSD Alpha systems, which causes them to produce weak keys which may be more easily broken...
Дырки в MailStudio 2000
Многочисленные дырки из-за недостаточного контроля ввода - обратный путь, некомментируемые шелл-символы и т.д. позволяют полностью скомпрометировать сервер...
CVE-2000-0506
The "capabilities" feature in Linux before 2.2.16 allows local users to cause a denial of service or gain privileges by setting the capabilities to prevent a setuid program from dropping privileges, aka the "Linux kernel setuid/setcap vulnerability."...
CVE-2000-0527
userreg.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters...
