CVE-2000-0270

The make-temp-name Lisp function in Emacs 20 creates temporary files with predictable names, which allows attackers to conduct a symlink attack...

CVE-2000-0286

Technical details about CVE-2000-0286 are not publicly provided in the supplied documents. Monitor for updates from NVD/CVE feeds for affected products, fixes, and remediation guidance.

CVE-2000-0250

CVE-2000-0250 : The crypt function in QNX uses weak encryption, enabling local users to decrypt passwords. The available documents state this vulnerability stems from weak cryptography used by QNX’s crypt function, with impact described as complete confidentiality loss for locally accessible pass...

CVE-2000-0281

CVE-2000-0281 describes a buffer overflow in the Napster client beta 5 that allows a remote attacker to cause a denial of service by sending a long message. The vulnerability is triggered through the message-processing path, leading to potential crash or instability of the Napster client. The exi...

CVE-2000-0280

The CVE-2000-0280 entry describes a buffer overflow in RealNetworks RealPlayer client versions 6 and 7. The underlying issue is a vulnerability in handling a long Location URL, which can allow remote attackers to cause a denial of service. Public documentation here notes the affected component as...

CVE-2000-0300

The CVE refers to PcAnywhere 9.x where the default encryption method is weak, enabling remote attackers to sniff and decrypt PcAnywhere or NT domain accounts. Affected software: PcAnywhere 9.x (default encryption). Root cause: use of weak default encryption in the authentication pathway. Impact: ...

CVE-2000-0259

The CVE describes a permission misconfiguration in Windows NT 4.0 related to the Cryptography\Offload registry key used by OffloadModExpo. The default permissions allow local users to access cryptographic keys of other users, enabling compromise of confidentiality and integrity of those keys. No ...

CVE-2000-0248

The CVE-2000-0248 issue affects the Red Hat Linux Piranha LVS package (web GUI) where a backdoor password exists, enabling remote command execution via the GUI. Public sources detail an arbitrary-command vulnerability in the piranha-gui component, with exploits demonstrating execution of commands...

CVE-2000-0192

The default installation of Caldera OpenLinux 2.3 includes the CGI program rpmquery, which allows remote attackers to determine what packages are installed on the system...

CVE-2000-0042

Buffer overflow in CSM mail server allows remote attackers to cause a denial of service or execute commands via a long HELO command...

CVE-2000-0043

The CVE-2000-0043 issue affects the CamShot WebCam HTTP server and is caused by a buffer overflow in handling long GET requests, enabling remote command execution. The available data confirms the vulnerability type, affected component, and the remote nature of the exploit, with a base score of 7....

CVE-2000-0050

The Allaire Spectra Webtop allows authenticated users to access other Webtop sections by specifying explicit URLs...

CVE-2000-0024

IIS does not properly canonicalize URLs, potentially allowing remote attackers to bypass access restrictions in third-party software via escape characters, aka the "Escape Character Parsing" vulnerability...

CVE-2000-0014

The CVE-2000-0014 entry describes a denial-of-service in the Savant web server triggered by a crafted URL containing a null character. The impact is a Partial Availability impact with no confidentiality or integrity impact, as per CVSS v2 metrics, and the exploitation could be performed over the ...

CVE-2000-0012

Affected component: w3-msql CGI in the miniSQL package. Root cause: a buffer overflow in the w3-msql CGI program. Impact: remote attackers could exploit this to execute commands and potentially gain a shell on the affected system. Exploitation status: described as a remote overflow vulnerability;...

CVE-2000-0185

Technical details about CVE-2000-0185 are not publicly provided in the supplied documents. Monitor for updates from official sources for any affected products, scope, impact, and remediation.

CVE-2000-0181

Firewall-1 3.0 and 4.0 leaks packets with private IP address information, which could allow remote attackers to determine the real IP address of the host that is making the connection...

CVE-2000-0223

CVE-2000-0223 affects the wmcdplay CD player component used with the WindowMaker desktop. The vulnerability is a buffer overflow caused by handling a long parameter, enabling local users to gain root privileges. The available documents do not specify specific versions, affected builds, or the exa...

CVE-2000-0033

CVE-2000-0033 affects InterScan VirusWall SMTP scanner; vulnerability arises from improper handling of messages with malformed attachments. CVSS v2 base score 5.0 (MEDIUM) with no confidentiality/availability impact and partial integrity impact. No remediation details are provided in the documents.

CVE-2000-0051

CVE-2000-0051 affects the Allaire Spectra Configuration Wizard. The vulnerability allows remote attackers to cause a denial of service by repeatedly resubmitting data collections for indexing via a URL. CVSS: NETWORK, LOW complexity, no authentication, availability impact PARTIAL, base score 5.0 ...