CVE-2000-0663

The CVE-2000-0663 issue concerns Windows NT/2000 where the registry entry for Explorer.exe uses a relative path name, enabling a local user to cause arbitrary commands to run by placing a Trojan named Explorer.exe in the %Systemdrive% directory (the “Relative Shell Path” vulnerability). Affected ...

CVE-2000-0508

This CVE concerns rpc.lockd in Red Hat Linux 6.1 and 6.2, where remote attackers can cause a denial of service by sending a malformed request. The available connected documents corroborate the affected component (rpc.lockd) and the impact (remote DoS), but do not provide concrete patch versions o...

CVE-2000-0273

Technical details about CVE-2000-0273 are not publicly available in the provided documents. Monitor for updates.

CVE-2000-0128

The CVE-2000-0128 entry affects Finger Server 0.82 and is caused by input that allows shell metacharacters to be interpreted, enabling remote command execution. The vulnerability is documented with a high CVSS v2 score (AV:N/AC:L/Au:N/C:C/I:C/A:C). The provided records do not specify affected pla...

CVE-2000-0669

The CVE-2000-0669 entry describes a vulnerability in Novell NetWare 5.0 where remote attackers can cause a denial of service by flooding port 40193 with random data. The available sources confirm NetWare 5.0 as affected and indicate the impact as a partial availability disruption, with no informa...

CVE-2000-0369

The IDENT server in Caldera Linux 2.3 creates multiple threads for each IDENT request, which allows remote attackers to cause a denial of service...

CVE-2000-0631

An administrative script from IIS 3.0, later included in IIS 4.0 and 5.0, allows remote attackers to cause a denial of service by accessing the script without a particular argument, aka the "Absent Directory Browser Argument" vulnerability...

CVE-2000-0257

The vulnerability CVE-2000-0257 concerns the NetWare remote web administration utility. A buffer overflow is triggered by a long URL, enabling remote attackers to cause a denial of service or execute commands. The available documents confirm the affected component and the general impact but do no...

CVE-2000-0676

CVE-2000-0676 affects Netscape Communicator/Navigator 4.04–4.74. An unsigned Java applet could read local files (e.g., file://) and connect to remote resources via file/http/https/ftp URLs, enabling data exfiltration via Brown Orifice. Root cause is an implementation error in the JRE bundled with...

CVE-2000-0489

Technical details are not publicly available in the provided connected documents. Monitor for updates; no exposed exploit details, affected versions, or root-cause specifics are supplied here.

CVE-2000-0765

CVE-2000-0765 describes a buffer overflow in the HTML interpreter of Microsoft Office 2000 . An attacker could trigger the overflow via a long embedded object tag in HTML, allowing execution of arbitrary commands. The sources provide the vulnerability description but do not specify affected versi...

CVE-2000-0778

CVE-2000-0778 affects Microsoft IIS (IIS 5.0/5.1). Vulnerability arises from an information-disclosure flaw where an HTTP Translate: f header allows remote attackers to obtain ASP/ASA source code. Affected products include Windows IIS; root cause is improper handling of the Translate header leadi...

CVE-2000-0595

CVE-2000-0595 involves the libedit library, where .editrc is searched in the current directory rather than the user’s home directory. This can let a local user execute arbitrary commands by placing a crafted .editrc in a directory other than the user’s home. The available records describe a local...

CVE-2000-0677

Buffer overflow in IBM Net.Data db2www CGI (PATH_INFO) allows remote code execution. Affected: IBM Net.Data db2www CGI; Root cause: stack overflow triggered by a long PATH_INFO environmental variable. Impact: remote attacker could execute arbitrary code with web server privileges (high risk; CVSS...

CVE-2000-0459

IMP does not remove files properly if the MSWordView application quits, which allows local users to cause a denial of service by filling up the disk space by requesting a large number of documents and prematurely stopping the request...

CVE-2000-0468

CVE-2000-0468 affects HP-UX 10.20 and 11, where a local attacker can overwrite files via a symbolic link attack. The entry indicates local access with low complexity and partial confidentiality/integrity/availability impact (CVSS v2 base 4.6). The connected documents corroborate the description b...

CVE-2000-0237

Netscape Enterprise Server with Web Publishing enabled allows remote attackers to list arbitrary directories via a GET request for the /publisher directory, which provides a Java applet that allows the attacker to browse the directories...

CVE-2000-0482

The CVE-2000-0482 issue affects Check Point Firewall-1, where an attacker can cause a denial-of-service by sending a flood of malformed fragmented IP packets. Public sources (e.g., CERT/CC and vendor advisories) describe the DoS as resulting from CPU/memory saturation due to fragmentation handlin...

CVE-2000-0588

SawMill 5.0.21 CGI program allows remote attackers to read the first line of arbitrary files by listing the file in the rfcf parameter, whose contents SawMill attempts to parse as configuration commands...

CVE-2000-0597

The CVE-2000-0597 entry concerns Microsoft Office 2000 (Excel and PowerPoint) and PowerPoint 97. The vulnerability arises because these products are marked as safe for scripting, enabling a remote attacker to coax Internet Explorer or some email clients to save files to arbitrary locations via th...