8754 matches found
CVE-2000-0583
vchkpw program in vpopmail before version 4.8 does not properly cleanse an untrusted format string used in a call to syslog, which allows remote attackers to cause a denial of service via a USER or PASS command that contains arbitrary formatting directives...
CVE-2000-0655
CVE-2000-0655 affects Netscape Communicator 4.73 and earlier. The vulnerability allows remote attackers to cause a denial of service or execute arbitrary commands through a JPEG image containing a comment with an illegal field length of 1. The connected documents corroborate the affected software...
CVE-2000-0507
CVE-2000-0507 concerns Imate Webmail Server 2.5. A remote attacker can cause a denial of service by sending a HELO command with an extremely long argument, potentially crashing/shutting down the SMTP service (network exploit, no auth required; availability impact). The vulnerability stems from ha...
CVE-2000-0466
Affected software: AIX cdmount (part of UMS) on AIX systems. The issue arises from insecure handling of user-supplied arguments in cdmount, which spawns a shell to invoke the mount command with those arguments, allowing local users to execute arbitrary commands as root (SUID root wrapper). Impact...
CVE-2000-0638
CVE-2000-0638 affects Big Brother’s bb-hostsvc.sh CGI. The vulnerability is a directory traversal in the HOSTSVC parameter, allowing a remote attacker to read arbitrary files on the affected system. Affected: Big Brother 1.4h1 and earlier. Root cause: input containing ".." used to traverse filesy...
CVE-2000-0063
CVE-2000-0063 affects the Nortel Contivity HTTP server via the cgiproc CGI script, which allows remote attackers to read arbitrary files by passing a filename parameter. This points to an uncontrolled file access flaw in the CGI handler, enabling partial confidentiality impact. The available docu...
CVE-2000-0076
nviboot boot script in the Debian nvi package allows local users to delete files via malformed entries in vi.recover...
CVE-2000-0065
Buffer overflow in InetServ 3.0 allows remote attackers to execute commands via a long GET request...
CVE-2000-0459
The CVE-2000-0459 issue affects IMP with the MSWordView process. The root cause is that IMP does not remove files properly when MSWordView quits, allowing a local attacker to cause a denial of service by depleting disk space through repeated requests for a large number of documents and an early t...
CVE-2000-0128
The Finger Server 0.82 allows remote attackers to execute commands via shell metacharacters...
CVE-2000-0521
Savant web server vulnerability CVE-2000-0521 allows remote disclosure of CGI source by requesting the original CGI form. The OpenVAS NASL description: “Savant original form CGI access” states that attackers can download the unprocessed CGI, exposing sensitive information stored inside those scri...
CVE-2000-0594
BitchX IRC client does not properly cleanse an untrusted format string, which allows remote attackers to cause a denial of service via an invite to a channel whose name includes special formatting characters...
CVE-2000-0458
CVE-2000-0458 affects the MSWordView application in IMP, which creates world-readable files in the /tmp directory. This allows other local users to read potentially sensitive information. The publicly reported details indicate a local-privilege-confidentiality exposure due to insecure temporary f...
CVE-2000-0558
HP OpenView Network Node Manager 6.1 is affected by a buffer overflow in the Alarm service (OVALARMSRV) that listens on port 2345, enabling remote command execution. The vulnerability stems from a buffer overflow condition in the OVALARMSRV handling path. The available sources confirm the affecte...
CVE-2000-0451
CVE-2000-0451 concerns the Intel Express 8100 ISDN router, where remote attackers can cause a denial of service by sending oversized or fragmented ICMP packets. The available connected metadata confirms the affected device and the specific attack vector (ICMP amplification/fragmentation) that lea...
CVE-2000-0604
gkermit in Red Hat Linux is improperly installed with setgid uucp, which allows local users to modify files owned by uucp...
CVE-2000-0468
man in HP-UX 10.20 and 11 allows local attackers to overwrite files via a symlink attack...
CVE-2000-0603
Microsoft SQL Server 7.0 allows a local user to bypass permissions for stored procedures by referencing them via a temporary stored procedure, aka the "Stored Procedure Permissions" vulnerability...
CVE-2000-0660
CVE-2000-0660 affects the WDaemon web server for WorldClient 2.1, allowing remote attackers to read arbitrary files through a directory-traversal (..). The underlying issue is improper handling of path components, enabling unauthorized file access. Exploitation details are not provided in the CVE...