CVE-2000-0519

CVE-2000-0519 affects Internet Explorer 4.x/5.x. The vulnerability arises because SSL certificates are not properly re-validated when a user starts a new SSL session with the same server within the same IE session, giving partial confidentiality impact. The CVSS v2 base score is 2.6 (LOW). No rem...

CVE-2000-0603

Microsoft SQL Server 7.0 contains a vulnerability where a local user can bypass stored‑procedure permissions by referencing them through a temporary stored procedure, effectively elevating privileges. The issue affects the ability to enforce access controls on stored procedures and is described a...

CVE-2000-0751

The CVE-2000-0751 issue concerns mopd (Maintenance Operations Protocol loader daemon) that fails to properly cleanse user-supplied format strings, enabling remote attackers to execute arbitrary commands. The vulnerability is described as a format-string vulnerability in mopd, with potential for a...

CVE-2000-0777

CVE-2000-0777 concerns Microsoft Money: the password protection feature stores the password in plaintext, enabling local attackers with physical access to extract it. CVSSv2 base score 7.2 (HIGH) with LOCAL access, LOW attack complexity, and full impact on confidentiality, integrity, and availabi...

CVE-2000-0516

The CVE-2000-0516 entry concerns Shiva Access Manager 5.0.0, where configuration data stored in an LDAP directory includes the root DN and password written in cleartext to a file that is world-readable. This local-access vulnerability enables a local attacker to read sensitive credentials and com...

CVE-2000-0537

BRU backup software is affected. Local users can cause arbitrary data to be appended to files by supplying an alternate configuration file via the BRUEXECLOG environment variable. The description does not specify affected versions, root cause beyond environmental variable handling, or remediation...

CVE-2000-0075

CVE-2000-0075 refers to the Super Mail Transfer Package (SMTP), later called MsgCore, suffering a memory leak that allows remote attackers to cause a denial of service by repeatedly issuing HELO, MAIL FROM, RCPT TO, and DATA commands within the same SMTP session. The affected product is described...

CVE-2000-0076

Summary: CVE-2000-0076 affects the nviboot boot script in the Debian nvi package. Local users can delete files through malformed entries in vi.recover. The available records confirm the affected component (nviboot in Debian nvi), the underlying cause (malformed vi.recover entries) and the impact ...

CVE-2000-0539

Allaire JRun 2.3.x is affected by CVE-2000-0539 through information disclosure in servlet examples (SessionServlet), enabling remote attackers to obtain sensitive data such as HttpSession IDs. The OpenVAS entries corroborate that JRun sample files on affected systems expose sensitive information;...

CVE-2000-0318

Atrium Mercur Mail Server 3.2 allows local attackers to read other user's email and create arbitrary files via a dot dot .. attack...

CVE-2000-0639

The issue affects Big Brother 1.4h2 and earlier; default configuration lacks proper access restrictions, enabling remote upload of a file via bbd that can be executed as a CGI script by the web server, allowing remote command execution. CVSS2 base impact is high (7.5). No remediation details are ...

CVE-2000-0090

CVE-2000-0090 affects VMware 1.1.2 and describes a local denial-of-service condition caused by a symlink attack. The provided documents confirm the vulnerability and its local access vector, but do not provide exploitation details beyond the basic description, nor any remediation or patch informa...

CVE-2000-0758

The CVE-2000-0758 entry affects Lyris List Manager 3 and 4; the web interface allows subscribers to obtain administrative access by modifying the hidden form field list_admin. Root cause is insufficient server-side validation of this hidden field, enabling privilege escalation from a subscriber. ...

CVE-2000-0637

Microsoft Excel 97 and 2000 are affected by a vulnerability in the Register.ID function that allows an attacker to trigger execution of arbitrary commands by specifying a malicious .dll; impact is arbitrary commands with local access. The provided documents do not include exploitation details or ...

CVE-2000-0335

The CVE-2000-0335 issue affects the resolver in glibc 2.1.3 , which uses predictable IDs. This design allows a local attacker to cause DNS query spoofing by manipulating IDs, undermining DNS query integrity. The vulnerability’s impact is described as the ability to spoof results, with a base CVSS...

CVE-2000-0272

CVE-2000-0272 affects RealNetworks RealServer, where a remote attacker can cause denial of service by sending malformed input to port 7070. The connected Nessus plugin corroborates a crash condition via specially crafted packets and recommends upgrading RealServer to the most recent version as a ...

CVE-2000-0730

Vulnerability in newgrp command in HP-UX 11.0 allows local users to gain privileges...

CVE-2000-0745

CVE-2000-0745 affects PHP-Nuke where admin.php3 does not properly verify the administrator password, enabling privilege escalation when a URL omits the aid/pwd parameters. Connected documents provide a detailed exploitation path: an attacker can manipulate URL parameters and the cookiedecode rout...

CVE-2000-0426

UltraBoard 1.6 and other versions allow remote attackers to cause a denial of service by referencing UltraBoard in the Session parameter, which causes UltraBoard to fork copies of itself...

CVE-2000-0644

CVE-2000-0644 affects WFTPD and WFTPD Pro 2.41. The vulnerability enables remote denial of service by issuing a STAT command while a LIST command is still in progress. The public sources in the connected documents confirm the impact as a partial availability degradation, but the materials do not ...