CVE-2000-0272

CVE-2000-0272 affects RealNetworks RealServer, where a remote attacker can cause denial of service by sending malformed input to port 7070. The connected Nessus plugin corroborates a crash condition via specially crafted packets and recommends upgrading RealServer to the most recent version as a ...

CVE-2000-0730

Vulnerability in newgrp command in HP-UX 11.0 allows local users to gain privileges...

CVE-2000-0644

CVE-2000-0644 affects WFTPD and WFTPD Pro 2.41. The vulnerability enables remote denial of service by issuing a STAT command while a LIST command is still in progress. The public sources in the connected documents confirm the impact as a partial availability degradation, but the materials do not ...

CVE-2000-0481

CVE-2000-0481 describes a buffer overflow in KDE Kmail triggered by an attachment with a long file name, allowing a remote attacker to cause a denial of service. The NVD entry lists a Network-attack vector, low complexity, no authentication, with Availability impact described as Partial. The CVSS...

CVE-2000-0705

CVE-2000-0705 : ntop running in web mode is vulnerable to a directory-traversal attack using ".." that enables remote attackers to read arbitrary files. The described impact is partial confidentiality, with no available details on exploitation status or a confirmed fix in the provided documents. ...

CVE-2000-0635

The viewpage.html sample page in the MiniVend shopping cart program allows remote attackers to execute arbitrary commands via shell metacharacters...

CVE-2000-0130

Buffer overflow in SCO scohelp program allows remote attackers to execute commands...

CVE-2000-0514

GSSFTP FTP daemon in Kerberos 5 1.1.x does not properly restrict access to some FTP commands, which allows remote attackers to cause a denial of service, and local users to gain root privileges...

CVE-2000-0763

xlockmore and xlockf do not properly cleanse user-injected format strings, which allows local users to gain root privileges via the -d option...

CVE-2000-0677

Buffer overflow in IBM Net.Data db2www CGI program allows remote attackers to execute arbitrary commands via a long PATHINFO environmental variable...

CVE-2000-0685

BEA WebLogic 5.1.x does not properly restrict access to the PageCompileServlet, which could allow remote attackers to compile and execute Java JHTML code by directly invoking the servlet on any source file...

CVE-2000-0728

xpdf PDF viewer client earlier than 0.91 allows local users to overwrite arbitrary files via a symlink attack...

CVE-2000-0727

CVE-2000-0727 affects the xpdf PDF viewer client older than 0.91. The flaw: when handling embedded URLs, the client does not correctly launch a web browser, enabling an attacker to execute arbitrary commands via a URL containing shell metacharacters. NVD assigns a base CVSS v2.0 score of 7.6 (HIG...

CVE-2000-0166

CVE-2000-0166 affects the InterAccess TelnetD server. A buffer overflow is triggered by a long login name, potentially allowing a remote attacker to execute commands. The NVD entry assigns a HIGH risk (CVSSv2: AV:N/AC:L/Au:N/C:C/I:C/A:C, base 10.0). No remediation details are provided in the conn...

CVE-2000-0706

Buffer overflows in ntop running in web mode allows remote attackers to execute arbitrary commands...

CVE-2000-0707

CVE-2000-0707 affects PCCS MySQLDatabase Admin Tool Manager, versions 1.2.4 and earlier. The vulnerability stems from installing the file dbconnect.inc inside the web root, which permits remote attackers to read it and obtain sensitive credentials such as the database administrative password. Ope...

CVE-2000-0477

Buffer overflow in Norton Antivirus for Exchange NavExchange allows remote attackers to cause a denial of service via a .zip file that contains long file names...

CVE-2000-0486

Buffer overflow in Cisco TACACS+ tacplus server allows remote attackers to cause a denial of service via a malformed packet with a long length field...

CVE-2000-0566

makewhatis in Linux man package allows local users to overwrite files via a symlink attack...

CVE-2000-0631

The CVE-2000-0631 entry concerns an IIS administrative script that was in IIS 3.0 and later included in IIS 4.0 and 5.0. The vulnerability allows remote attackers to cause a denial of service by accessing the script without a specific argument (the Absent Directory Browser Argument). The connecte...