CVE-2000-0669

The CVE-2000-0669 entry describes a vulnerability in Novell NetWare 5.0 where remote attackers can cause a denial of service by flooding port 40193 with random data. The available sources confirm NetWare 5.0 as affected and indicate the impact as a partial availability disruption, with no informa...

CVE-2000-0369

The IDENT server in Caldera Linux 2.3 creates multiple threads for each IDENT request, which allows remote attackers to cause a denial of service...

CVE-2000-0631

An administrative script from IIS 3.0, later included in IIS 4.0 and 5.0, allows remote attackers to cause a denial of service by accessing the script without a particular argument, aka the "Absent Directory Browser Argument" vulnerability...

CVE-2000-0257

The vulnerability CVE-2000-0257 concerns the NetWare remote web administration utility. A buffer overflow is triggered by a long URL, enabling remote attackers to cause a denial of service or execute commands. The available documents confirm the affected component and the general impact but do no...

CVE-2000-0477

CVE-2000-0477 describes a buffer overflow in Norton Antivirus for Exchange (NavExchange) that could allow a remote attacker to cause a denial of service by delivering a ZIP file containing long file names. The available sources consistently state this as a vulnerability in NavExchange, with no de...

CVE-2000-0778

CVE-2000-0778 affects Microsoft IIS (IIS 5.0/5.1). Vulnerability arises from an information-disclosure flaw where an HTTP Translate: f header allows remote attackers to obtain ASP/ASA source code. Affected products include Windows IIS; root cause is improper handling of the Translate header leadi...

CVE-2000-0579

IRIX crontab is affected: it creates temporary files with predictable names and the user’s umask, enabling local users to modify another user’s crontab while it is being edited. The CVSS data indicates local access with partial confidentiality/integrity/availability impact. No remediation details...

CVE-2000-0469

Selena Sol WebBanner 4.0 allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2000-0595

CVE-2000-0595 involves the libedit library, where .editrc is searched in the current directory rather than the user’s home directory. This can let a local user execute arbitrary commands by placing a crafted .editrc in a directory other than the user’s home. The available records describe a local...

CVE-2000-0677

Buffer overflow in IBM Net.Data db2www CGI (PATH_INFO) allows remote code execution. Affected: IBM Net.Data db2www CGI; Root cause: stack overflow triggered by a long PATH_INFO environmental variable. Impact: remote attacker could execute arbitrary code with web server privileges (high risk; CVSS...

CVE-2000-0459

IMP does not remove files properly if the MSWordView application quits, which allows local users to cause a denial of service by filling up the disk space by requesting a large number of documents and prematurely stopping the request...

CVE-2000-0468

CVE-2000-0468 affects HP-UX 10.20 and 11, where a local attacker can overwrite files via a symbolic link attack. The entry indicates local access with low complexity and partial confidentiality/integrity/availability impact (CVSS v2 base 4.6). The connected documents corroborate the description b...

CVE-2000-0237

Netscape Enterprise Server with Web Publishing enabled allows remote attackers to list arbitrary directories via a GET request for the /publisher directory, which provides a Java applet that allows the attacker to browse the directories...

CVE-2000-0322

The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package is vulnerable to arbitrary command execution via shell metacharacters. This flaw affects Red Hat 6.2 systems running the Piranha LVS cluster service and GUI (specifically the piranha and piranha-gui rpm packages). An authent...

CVE-2000-0482

The CVE-2000-0482 issue affects Check Point Firewall-1, where an attacker can cause a denial-of-service by sending a flood of malformed fragmented IP packets. Public sources (e.g., CERT/CC and vendor advisories) describe the DoS as resulting from CPU/memory saturation due to fragmentation handlin...

CVE-2000-0588

SawMill 5.0.21 CGI program allows remote attackers to read the first line of arbitrary files by listing the file in the rfcf parameter, whose contents SawMill attempts to parse as configuration commands...

CVE-2000-0597

The CVE-2000-0597 entry concerns Microsoft Office 2000 (Excel and PowerPoint) and PowerPoint 97. The vulnerability arises because these products are marked as safe for scripting, enabling a remote attacker to coax Internet Explorer or some email clients to save files to arbitrary locations via th...

CVE-2000-0633

Technical details for CVE-2000-0633 are not publicly available in the provided documents. The description notes a local reboot/halt issue in the Mandrake Linux usermode package, but no specifics on affected versions, root cause, or fixes are supplied. Monitor for updates.

CVE-2000-0585

ISC DHCP client program dhclient allows remote attackers to execute arbitrary commands via shell metacharacters...

CVE-2000-0661

The CVE-2000-0661 entry concerns WircSrv IRC Server 5.07s, which is vulnerable to a denial of service when a long string is sent to the server port. The available description confirms that remote attackers can trigger a partial availability impact by exploiting this input handling issue. No conne...