7988 matches found
CVE-2000-0042
CVE-2000-0042 : Buffer overflow in the CSM Mail Server when handling a long HELO command allows remote attackers to cause a denial of service and potentially execute commands. Affected: CSM Mail Server (MTA). Consequence: crash or arbitrary code execution as per sources. Remediation: apply vendor...
CVE-2000-0192
The CVE-2000-0192 issue affects the default installation of Caldera OpenLinux 2.3 via the rpm_query CGI, which allows remote attackers to enumerate installed RPMs by accessing the CGI over the web server. This leads to information disclosure about installed services and versions (partial confiden...
CVE-2000-0010
The CVE-2000-0010 entry concerns WebWho+ whois.cgi, a CGI script where the TLD parameter can be manipulated to execute arbitrary shell commands on the remote host. Multiple sources (NVD/NASM-like entries and PT-PTSecurity) confirm remote command execution as the impact, due to shell metacharacter...
CVE-2000-0181
CVE-2000-0181 affects Check Point Firewall-1 3.0 and 4.0, where leaked packets can reveal private IP addresses, allowing remote attackers to infer the real IP of the host initiating the connection. The vulnerability is a confidentiality issue (PARTIAL impact) with network attack vector and no aut...
CVE-2000-0024
CVE-2000-0024 affects Microsoft IIS. The vulnerability is caused by improper URL canonicalization, enabling remote attackers to bypass access controls in third-party software through escape characters. The provided documents identify the issue and its description, but do not include concrete reme...
CVE-2000-0051
The Allaire Spectra Configuration Wizard allows remote attackers to cause a denial of service by repeatedly resubmitting data collections for indexing via a URL...
CVE-2000-0020
DNS PRO allows remote attackers to conduct a denial of service via a large number of connections...
CVE-2000-0184
Linux printtool sets the permissions of printer configuration files to be world-readable, which allows local attackers to obtain printer share passwords...
CVE-2000-0070
NtImpersonateClientOfPort local procedure call in Windows NT 4.0 allows local users to gain privileges, aka "Spoofed LPC Port Request."...
CVE-2000-0043
Buffer overflow in CamShot WebCam HTTP server allows remote attackers to execute commands via a long GET request...
CVE-2000-0184
The vulnerability CVE-2000-0184 affects the Linux printer subsystem via the printtool utility, which incorrectly sets printer configuration files to world-readable. This misconfiguration can allow a local attacker to read printer share passwords stored in those files, leading to potential unautho...
CVE-2000-0223
Buffer overflow in the wmcdplay CD player program for the WindowMaker desktop allows local users to gain root privileges via a long parameter...
CVE-2000-0070
CVE-2000-0070 affects Windows NT 4.0 via the NtImpersonateClientOfPort local procedure call, enabling local privilege escalation. The vulnerability allows a local user to gain complete control (confidentiality, integrity, and availability flags impacted) through impersonation of a port request. T...
CVE-2000-0165
CVE-2000-0165 affects the DeleGate proxy server, where the application is vulnerable to multiple remote buffer overflows. The available sources indicate that these overflows allow a remote attacker to execute arbitrary commands, potentially leading to denial of service or full code execution. A d...
CVE-2000-0020
CVE-2000-0020 relates to DNS PRO: remote DoS via a large number of connections. The connected sources show DNS PRO as vulnerable to DoS with partial availability impact (NVD CVSS v2 base score 5.0, NETWORK vector, LOW complexity, no authentication). Affected versions are not specified in PT-1999-...
CVE-2000-0050
The Allaire Spectra Webtop contains an access-control flaw: authenticated users can reach other Webtop sections by directly specifying explicit URLs. This implies horizontal privilege escalation via URL manipulation. The issue is described in CVE-2000-0050 with a CVSS v2 base score of 4.6 (Medium...
CVE-2000-0206
The CVE-2000-0206 entry concerns Oracle 8.1.5.x on Linux, where the installer follows symlinks and creates orainstRoot.sh with world-writable permissions. This configuration flaw allows local users to gain privileges. The available documents specify the vulnerable component (orainstRoot.sh during...
CVE-2000-0324
pcAnywhere 8.x and 9.0 allows remote attackers to cause a denial of service via a TCP SYN scan, e.g. by nmap...
CVE-2000-0334
The Allaire Spectra container editor preview tool does not properly enforce object security, which allows an attacker to conduct unauthorized activities via an object-method that is added to the container object with a publishing rule...