CVE-2000-0277

Microsoft Excel 97 and 2000 does not warn the user when executing Excel Macro Language XLM macros in external text files, which could allow an attacker to execute a macro virus, aka the "XLM Text Macro" vulnerability...

CVE-2000-0330

The networking software in Windows 95 and Windows 98 allows remote attackers to execute commands via a long file name string, aka the "File Access URL" vulnerability...

CVE-2000-0004

ZBServer Pro (CVE-2000-0004) exposes a partial confidentiality impact by allowing remote attackers to read source code of executable files when a dot is inserted into the URL. This is a network-accessible issue with low attack complexity and no authentication required, aligning with a CVSS v2 bas...

CVE-2000-0228

CVE-2000-0228 affects Microsoft Windows Media License Manager. The vulnerability allows remote attackers to cause a denial of service by sending a malformed request that makes the manager halt. The connected records confirm the affected component and the root cause (malformed request triggering a...

CVE-2000-0328

CVE-2000-0328 refers to Windows NT 4.0 where TCP initial sequence numbers (ISNs) are generated predictably, enabling spoofing or hijacking of TCP sessions. Connected sources expand the scope to note that several TCP/IP stacks have been observed with weak ISN generation and that attacks can disrup...

CVE-2000-0246

The vulnerability CVE-2000-0246 affects Microsoft IIS 4.0/5.0 where ISAPI extension processing fails for a virtual directory mapped to a UNC share, enabling remote attackers to read ASP source and other files. OpenVAS/Nessus entries confirm ASP/HTR source disclosure via UNC-path access. No remedi...

CVE-2000-0267

Cisco Catalyst 5.4.x allows a user to gain access to the "enable" mode without a password...

CVE-2000-0235

Buffer overflow in the huh program in the orville-write package allows local users to gain root privileges...

CVE-2000-0169

Batch files in the Oracle web listener ows-bin directory allow remote attackers to execute commands via a malformed URL that includes '?&'...

CVE-2000-0113

The CVE-2000-0113 entry concerns the SyGate Remote Management program where the administration service does not properly restrict access, allowing remote attackers to cause a denial of service or view network traffic statistics. Connected documents corroborate a remote controller component (SyGat...

CVE-2000-0230

Buffer overflow in imwheel allows local users to gain root privileges via the imwheel-solo script and a long HOME environmental variable...

CVE-2000-0226

The CVE-2000-0226 entry maps to a concrete IIS 4.0 vulnerability: the chunked-encoding transfer mechanism does not cap the buffer size, allowing a malicious POST/PUT request to reserve a huge amount of memory and potentially exhaust server resources. This is described as a denial of service risk ...

CVE-2000-0267

Cisco Catalyst 5.4.x is affected by CVE-2000-0267, where a user can gain access to the privileged enable mode without a password. The issue is a local bypass of authentication to the enable shell, enabling partial to full privilege exposure as described (no explicit exploitation details in the do...

CVE-2000-0233

CVE-2000-0233 affects the SuSE Linux IMAP server. The issue allows remote attackers to bypass IMAP authentication and gain privileges. The provided documents state this vulnerability and its impact but do not include concrete exploitation details, affected versions, or root-cause specifics. No re...

CVE-2000-0258

CVE-2000-0258 affects IIS 4.0 and 5.0. The provided documents describe a remote denial-of-service vulnerability triggered by sending many URLs containing a large number of escaped characters, referred to as the "Myriad Escaped Characters" vulnerability. The NVD entry provides CVSS scores (2.0: 5....

CVE-2000-0323

Technical details are not publicly available in the provided documents. No specifics on affected products, versions, or mitigation are disclosed. Monitor for updates.

CVE-2000-0274

The CVE describes a denial-of-service condition in Linux related to the trustees kernel patch triggered by accessing a file or directory with an excessively long name. Connected records indicate Linux kernel/trustees patch is the affected area, with DoS impact but no explicit product version or p...

CVE-2000-0245

Technical details about CVE-2000-0245 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2000-0330

CVE-2000-0330 affects the networking software in Windows 95 and Windows 98. The vulnerability allows remote attackers to execute commands via a long file name string (the “File Access URL” issue). The CVSS data indicates a network-access, high-severity impact with complete confidentiality, integr...

CVE-2000-0260

The CVE-2000-0260 issue is a buffer overflow in the dvwssr.dll used by Microsoft FrontPage 98 Server Extensions for IIS, exposed via InterDev 1.0 and related IIS packages. The Core Advisory CORE-041200 documents a remotely exploitable boundary error in dvwssr.dll (FrontPage 98 extensions) that ca...