CVE-2000-0482

The CVE-2000-0482 issue affects Check Point Firewall-1, where an attacker can cause a denial-of-service by sending a flood of malformed fragmented IP packets. Public sources (e.g., CERT/CC and vendor advisories) describe the DoS as resulting from CPU/memory saturation due to fragmentation handlin...

CVE-2000-0588

SawMill 5.0.21 CGI program allows remote attackers to read the first line of arbitrary files by listing the file in the rfcf parameter, whose contents SawMill attempts to parse as configuration commands...

CVE-2000-0597

The CVE-2000-0597 entry concerns Microsoft Office 2000 (Excel and PowerPoint) and PowerPoint 97. The vulnerability arises because these products are marked as safe for scripting, enabling a remote attacker to coax Internet Explorer or some email clients to save files to arbitrary locations via th...

CVE-2000-0633

Technical details for CVE-2000-0633 are not publicly available in the provided documents. The description notes a local reboot/halt issue in the Mandrake Linux usermode package, but no specifics on affected versions, root cause, or fixes are supplied. Monitor for updates.

CVE-2000-0585

ISC DHCP client program dhclient allows remote attackers to execute arbitrary commands via shell metacharacters...

CVE-2000-0661

The CVE-2000-0661 entry concerns WircSrv IRC Server 5.07s, which is vulnerable to a denial of service when a long string is sent to the server port. The available description confirms that remote attackers can trigger a partial availability impact by exploiting this input handling issue. No conne...

CVE-2000-0548

CVE-2000-0548 describes a buffer overflow in the Kerberos 4 KDC program triggered by the e_msg variable in the kerb_err_reply function. This allows remote attackers to cause a Denial of Service over the network. The NVD entry lists network attack vector, low complexity, and no authentication requ...

CVE-2000-0426

UltraBoard 1.6 and other versions allow remote attackers to cause a denial of service by referencing UltraBoard in the Session parameter, which causes UltraBoard to fork copies of itself...

CVE-2000-0771

Microsoft Windows 2000 allows local users to cause a denial of service by corrupting the local security policy via malformed RPC traffic, aka the "Local Security Policy Corruption" vulnerability...

CVE-2000-0587

The CVE-2000-0587 entry concerns glftpd 1.18, where the privpath directive permits remote attackers to bypass directory access restrictions by abusing filename completion. This constitutes a vulnerability in the directory traversal/access-control mechanism, allowing authorized-appearing access to...

CVE-2000-0332

UltraBoard 1.6 is affected by a path traversal in UltraBoard.pl/UltraBoard.cgi that allows remote attackers to read arbitrary files by supplying a pathname containing .. followed by a null byte. The vulnerability is described as arbitrary file access via this traversal vector; no exploitation det...

CVE-2000-0666

CVE-2000-0666 affects the rpc.statd component of the nfs-utils package across various Linux distributions. The vulnerability arises from the rpc.statd daemon failing to cleanse untrusted format strings, with CERT/CC documenting that user-supplied data can be passed to syslog as a format string, e...

CVE-2000-0754

Technical details about CVE-2000-0754 are not publicly provided in the supplied documents; no affected versions, exploitation details, or fixes are stated. Monitor for updates from NVD/CVE feeds.

CVE-2000-0002

The provided documents confirm CVE-2000-0002 affects ZBServer Pro 1.50 and describes a buffer overflow in handling a long GET request, enabling remote command execution by an attacker. The OpenVAS entries corroborate a remote overflow/DoS scenario related to too-long URLs. No product-specific rem...

CVE-2000-0744

This CVE entry is rejected and not used; reference CVE-2000-0743 instead.

CVE-2000-0567

The CVE-2000-0567 issue affects Microsoft Outlook and Outlook Express through a vulnerable Date header in emails. The root cause is a buffer overflow that can be triggered remotely by processing a crafted email, allowing arbitrary commands to execute on affected systems. The vulnerability is cate...

CVE-2000-0369

The CVE-2000-0369 entry describes a vulnerability in the IDENT server of Caldera Linux 2.3 where the server spawns multiple threads per IDENT request. This threading pattern can be exploited by remote attackers to trigger a denial-of-service condition against the impacted system. The reported imp...

CVE-2000-0675

Technical details (affected product/version, root cause, impact, or fixes) are not publicly provided in the supplied documents; monitor for updates.

CVE-2000-0643

Buffer overflow in WebActive HTTP Server 1.00 allows remote attackers to cause a denial of service via a long URL...

CVE-2000-0711

Vulnerability summary (CVE-2000-0711) : Netscape Communicator fails to prevent a ServerSocket object from being created by untrusted entities, enabling a remote attacker to start a server on the victim’s system via a malicious applet (as demonstrated by Brown Orifice). The underlying issue is a f...