7988 matches found
CVE-2000-0299
Buffer overflow in WebObjects.exe in the WebObjects Developer 4.5 package allows remote attackers to cause a denial of service via an HTTP request with long headers such as Accept...
CVE-2000-0275
CRYPTOCard CryptoAdmin for PalmOS uses weak encryption to store a user's PIN number, which allows an attacker with access to the .PDB file to generate valid PT-1 tokens after cracking the PIN...
CVE-2000-0295
LCDproc is vulnerable to a remote buffer overflow via the screen_add command. The CVE description states attackers can gain root privileges on the host; OpenVAS notes the LCDproc process runs with typical privileges (usually nobody). Affected products/versions are LCDproc prior to 0.4.1. Remediat...
CVE-2000-0284
The CVE-2000-0284 issue affects University of Washington IMAP Server (UW-IMAP) imapd, specifically involving a buffer overflow in processing command arguments (e.g., LIST, LSUB) that can be triggered by a valid user. The vulnerability enables an authenticated user to potentially execute arbitrary...
CVE-2000-0256
The CVE-2000-0256 entry describes buffer overflows in FrontPage 97/98 Server Extensions, specifically htimage.exe (and Imagemap.exe) that allow a remote attacker to perform actions beyond the web site’s scope. A concrete exploit path is documented for htimage.exe via /cgi-bin/htimage.exe/AAAA[......
CVE-2000-0270
The CVE affects Emacs 20’s make-temp-name Lisp function, which creates temporary files with predictable names, enabling a symlink attack. This is described by CVE-2000-0270 in NVD; connected sources note the same vulnerability. The available documents do not specify a patch version or workaround....
CVE-2000-0299
CVE-2000-0299 affects the WebObjects Developer 4.5 package, where the WebObjects.exe component is vulnerable to a buffer overflow triggered by HTTP requests with long headers (e.g., Accept). The description states this allows remote denial of service. No explicit patch or remediation is provided ...
CVE-2000-0291
Buffer overflow in Star Office 5.1 allows attackers to cause a denial of service by embedding a long URL within a document...
CVE-2000-0281
Buffer overflow in the Napster client beta 5 allows remote attackers to cause a denial of service via a long message...
CVE-2000-0286
X fontserver xfs allows local users to cause a denial of service via malformed input to the server...
CVE-2000-0295
Buffer overflow in LCDproc allows remote attackers to gain root privileges via the screenadd command...
CVE-2000-0293
CVE-2000-0293 affects SuSE Linux 6.3 (and cron.daily in earlier versions). The issue arises in file deletion logic: local users can cause arbitrary files to be deleted by creating files whose names include spaces, which are then misinterpreted by aaa_base when it deletes expired files from /tmp. ...
CVE-2000-0291
CVE-2000-0291 describes a buffer overflow in Star Office 5.1 triggered by embedding a long URL in a document, resulting in a denial of service. The NVD entry reports a base score of 4.6 (Medium) with local, low complexity access and partial impacts to confidentiality, integrity, and availability....
CVE-2000-0271
In CVE-2000-0271, Emacs 20’s read-passwd and related Lisp functions do not properly clear the history of recently typed keys. This can allow an attacker to read unencrypted passwords stored in the command history. The issue is rooted in the Lisp password/history handling within Emacs 20. The prov...
CVE-2000-0269
CVE-2000-0269 : Emacs 20 does not properly set permissions for a slave PTY when starting a new subprocess, allowing local users to read or modify communications between Emacs and the subprocess. Root cause: incorrect PTY permissions handling. Impact: partial confidentiality (read/modify communica...
CVE-2000-0266
The CVE-2000-0266 entry describes a vulnerability in Internet Explorer 5.01 where a malicious applet can bypass the cross-frame security policy by interacting with the Java JSObject to modify DOM properties, allowing an IFRAME to load an arbitrary JavaScript URL. This reveals a client-side cross-...
CVE-2000-0271
read-passwd and other Lisp functions in Emacs 20 do not properly clear the history of recently typed keys, which allows an attacker to read unencrypted passwords...
CVE-2000-0380
The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a denial of service by requesting a URL that contains a %% string...
CVE-2000-0288
CVE-2000-0288 affects Infonautics getdoc.cgi. The vulnerability allows remote attackers to bypass the payment phase for accessing documents by altering a form variable. The available sources confirm the existence and description of this issue but do not provide concrete details on affected versio...