CVE-2000-0628

The CVE-2000-0628 entry concerns the Apache::ASP 1.93 and earlier, where the source.asp example script in the Apache ASP module allows remote attackers to modify files. The vulnerability pertains to the source.asp file (/site/eg/source.asp in exposed deployments) which comes with the Apache::ASP ...

CVE-2000-0522

The CVE-2000-0522 entry refers to RSA ACE/Server and describes a denial-of-service vulnerability arising when an attacker floods the server’s authentication request port with UDP packets, causing the server to crash. Public sources (NVD/CVE records) confirm this issue exists and indicate an in-ne...

CVE-2000-0768

A function in Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read client files, aka a variant of the "Frame Domain Verification" vulnerability...

CVE-2000-0514

The CVE-2000-0514 issue affects the GSSFTP FTP daemon in Kerberos 5 1.1.x , where access to certain FTP commands is not properly restricted. This leads to a remote denial of service and enables local users to gain root privileges . The available connected documents confirm the affected component ...

CVE-2000-0770

CVE-2000-0770 affects Microsoft IIS 4.0 and 5.0, where file permission canonicalization allows remote attackers to bypass access restrictions on certain files when parent folders have permissive permissions. The connected documents corroborate the issue as the “File Permission Canonicalization” v...

CVE-2000-0347

CVE-2000-0347 affects Windows 95/98. The vulnerability is a denial-of-service triggered by sending a NetBIOS session request with a NULL source name to the remote host. The resulting impact is remote crash/DoS as described by multiple sources. No remediation details are provided in the supplied d...

CVE-2000-0289

Summary: CVE-2000-0289 concerns the Linux kernel IP Masquerade (NAT) feature on 2.2.x, where the UDP DLOOSE behavior can allow an attacker to send arbitrary UDP packets to hosts behind a vulnerable NAT by matching only destination IP/port, potentially affecting existing sessions. What is affected...

CVE-2000-0678

CVE-2000-0678 affects PGP 5.5.x through 6.5.3. The flaw: ADKs are not checked in the signed portion of a public certificate, so an attacker who modifies a victim’s certificate can decrypt data encrypted with that modified certificate. Exploitation requires a modified certificate and a sender usin...

CVE-2000-0265

Panda Security 3.0 allows users to uninstall the Panda software via its Add/Remove Programs applet...

CVE-2000-0712

CVE-2000-0712 affects Linux Intrusion Detection System (LIDS) 0.9.7. The issue allows local users to gain root privileges when LIDS is disabled via the security=0 boot option. The provided documents state the affected component and the condition that enables elevation but do not include explicit ...

CVE-2000-0594

CVE-2000-0594 affects the BitchX IRC client. The vulnerability arises from improper cleansing of an untrusted format string in the /INVITE command, allowing a remote attacker to trigger a denial of service by inviting a channel whose name includes special formatting characters. Connected document...

CVE-2000-0446

MDBMS (MDBMS database server) is affected by CVE-2000-0446 due to a buffer overflow triggered by a long string. The vulnerability permits remote attackers to execute arbitrary commands via the network, possibly crashing the service or running code. The NVD/CVE entry lists a CVSS v2 base score of ...

CVE-2000-0495

Microsoft Windows Media Encoder is affected by CVE-2000-0495, which allows remote attackers to cause a denial of service via a malformed request. The vulnerability is network-exploitable with no authentication and has an impact on availability (base score 5.0, CVSS2: AV:N/AC:L/Au:N/C:N/I:N/A:P). ...

CVE-2000-0681

CVE-2000-0681 describes a buffer overflow in the BEA WebLogic Server proxy plug-in that handles third‑party web server requests to forward JSP URLs. The flaw, triggered by long URL paths (notably with a .JSP extension), can overflow a buffer in wl_proxy and allow remote code execution as the user...

CVE-2000-0616

This CVE concerns a vulnerability in HP TurboIMAGE DBUTIL that allows local users to gain additional privileges via DBUTIL.PUB.SYS. Affected software: HP TurboIMAGE DBUTIL; vulnerable component/file: DBUTIL.PUB.SYS. Impact: local privilege escalation as described (partial confidentiality/integrit...

CVE-2000-0448

CVE-2000-0448 affects WebShield SMTP Management Tool 4.5.44. The vulnerability is an access-control flaw: the management port is not properly restricted when an IP address does not resolve to a hostname, allowing remote access to the configuration via the GET_CONFIG command. Documentation notes a...

CVE-2000-0340

Affected software: Gnomelib on SuSE Linux 6.3. Vulnerability: buffer overflow in Gnomelib that allows local users to execute arbitrary commands via the DISPLAY environment variable. Root cause: buffer overflow; Impact: local arbitrary command execution. Remediation: no patch/version details provi...

CVE-2000-0518

This CVE concerns Internet Explorer 4.x/5.x where SSL certificate validation is incomplete when the connection is initiated via an image or an iframe. The underlying issue is that IE verifies only that the certificate was issued by a trusted root, but does not confirm the server name or the certi...

CVE-2000-0237

CVE-2000-0237 affects Netscape Enterprise Server with Web Publishing enabled. A GET request to the /publisher directory serves a Java applet that allows remote attackers to list arbitrary directories, enabling directory browsing and potential exposure of server contents. The provided documents do...

CVE-2000-0703

CVE-2000-0703 affects suidperl (sperl). The vulnerability arises because suidperl does not properly cleanse the escape sequence "~!" before invoking /bin/mail to report errors. This enables local users to gain privileges by setting the interactive environmental variable and running suidperl with ...