CVE-2000-0347

CVE-2000-0347 affects Windows 95/98. The vulnerability is a denial-of-service triggered by sending a NetBIOS session request with a NULL source name to the remote host. The resulting impact is remote crash/DoS as described by multiple sources. No remediation details are provided in the supplied d...

CVE-2000-0289

Summary: CVE-2000-0289 concerns the Linux kernel IP Masquerade (NAT) feature on 2.2.x, where the UDP DLOOSE behavior can allow an attacker to send arbitrary UDP packets to hosts behind a vulnerable NAT by matching only destination IP/port, potentially affecting existing sessions. What is affected...

CVE-2000-0265

Panda Security 3.0 allows users to uninstall the Panda software via its Add/Remove Programs applet...

CVE-2000-0712

CVE-2000-0712 affects Linux Intrusion Detection System (LIDS) 0.9.7. The issue allows local users to gain root privileges when LIDS is disabled via the security=0 boot option. The provided documents state the affected component and the condition that enables elevation but do not include explicit ...

CVE-2000-0594

CVE-2000-0594 affects the BitchX IRC client. The vulnerability arises from improper cleansing of an untrusted format string in the /INVITE command, allowing a remote attacker to trigger a denial of service by inviting a channel whose name includes special formatting characters. Connected document...

CVE-2000-0446

MDBMS (MDBMS database server) is affected by CVE-2000-0446 due to a buffer overflow triggered by a long string. The vulnerability permits remote attackers to execute arbitrary commands via the network, possibly crashing the service or running code. The NVD/CVE entry lists a CVSS v2 base score of ...

CVE-2000-0495

Microsoft Windows Media Encoder is affected by CVE-2000-0495, which allows remote attackers to cause a denial of service via a malformed request. The vulnerability is network-exploitable with no authentication and has an impact on availability (base score 5.0, CVSS2: AV:N/AC:L/Au:N/C:N/I:N/A:P). ...

CVE-2000-0681

CVE-2000-0681 describes a buffer overflow in the BEA WebLogic Server proxy plug-in that handles third‑party web server requests to forward JSP URLs. The flaw, triggered by long URL paths (notably with a .JSP extension), can overflow a buffer in wl_proxy and allow remote code execution as the user...

CVE-2000-0616

This CVE concerns a vulnerability in HP TurboIMAGE DBUTIL that allows local users to gain additional privileges via DBUTIL.PUB.SYS. Affected software: HP TurboIMAGE DBUTIL; vulnerable component/file: DBUTIL.PUB.SYS. Impact: local privilege escalation as described (partial confidentiality/integrit...

CVE-2000-0448

CVE-2000-0448 affects WebShield SMTP Management Tool 4.5.44. The vulnerability is an access-control flaw: the management port is not properly restricted when an IP address does not resolve to a hostname, allowing remote access to the configuration via the GET_CONFIG command. Documentation notes a...

CVE-2000-0340

Affected software: Gnomelib on SuSE Linux 6.3. Vulnerability: buffer overflow in Gnomelib that allows local users to execute arbitrary commands via the DISPLAY environment variable. Root cause: buffer overflow; Impact: local arbitrary command execution. Remediation: no patch/version details provi...

CVE-2000-0518

This CVE concerns Internet Explorer 4.x/5.x where SSL certificate validation is incomplete when the connection is initiated via an image or an iframe. The underlying issue is that IE verifies only that the certificate was issued by a trusted root, but does not confirm the server name or the certi...

CVE-2000-0237

CVE-2000-0237 affects Netscape Enterprise Server with Web Publishing enabled. A GET request to the /publisher directory serves a Java applet that allows remote attackers to list arbitrary directories, enabling directory browsing and potential exposure of server contents. The provided documents do...

CVE-2000-0703

CVE-2000-0703 affects suidperl (sperl). The vulnerability arises because suidperl does not properly cleanse the escape sequence "~!" before invoking /bin/mail to report errors. This enables local users to gain privileges by setting the interactive environmental variable and running suidperl with ...

CVE-2000-0534

The CVE-2000-0534 issue affects the apsfilter component in the FreeBSD ports package , where it does not properly read user filter configurations , enabling a local user to execute commands as the lpd user . The connected documents provide the vulnerability description and impact but do not inclu...

CVE-2000-0533

Technical details about CVE-2000-0533 (SGI IRIX WorkShop cvconnect) are not publicly provided in the supplied documents. Monitor for updates from official sources.

CVE-2000-0566

The CVE-2000-0566 issue concerns the makewhatis script in the Linux man package. The attached documents confirm a local-privilege escalation/vector: makewhatis creates files in /tmp with predictable names and can be exploited via symlink attacks to overwrite arbitrary files or gain elevated privi...

CVE-2000-0673

The CVE-2000-0673 issue affects NetBIOS Name Server (NBNS) where the protocol lacks authentication, allowing remote attackers to cause a denial of service by sending spoofed Name Conflict or Name Release datagrams. Documented impact is DoS on affected hosts, e.g., NetBIOS name resolution disrupti...

CVE-2000-0751

The CVE-2000-0751 issue concerns mopd (Maintenance Operations Protocol loader daemon) that fails to properly cleanse user-supplied format strings, enabling remote attackers to execute arbitrary commands. The vulnerability is described as a format-string vulnerability in mopd, with potential for a...

CVE-2000-0587

The CVE-2000-0587 entry concerns glftpd 1.18, where the privpath directive permits remote attackers to bypass directory access restrictions by abusing filename completion. This constitutes a vulnerability in the directory traversal/access-control mechanism, allowing authorized-appearing access to...