CVE-2000-0477

Buffer overflow in Norton Antivirus for Exchange NavExchange allows remote attackers to cause a denial of service via a .zip file that contains long file names...

CVE-2000-0486

Buffer overflow in Cisco TACACS+ tacplus server allows remote attackers to cause a denial of service via a malformed packet with a long length field...

CVE-2000-0613

Cisco Secure PIX Firewall does not properly identify forged TCP Reset RST packets, which allows remote attackers to force the firewall to close legitimate connections...

CVE-2000-0566

makewhatis in Linux man package allows local users to overwrite files via a symlink attack...

CVE-2000-0009

The CVE-2000-0009 entry concerns the bna_pass program in Optivity NETarchitect, which relies on the PATH environment variable to locate the rm program. This behavior allows local users to execute arbitrary commands due to how PATH is used, as described in the observed description. The available d...

CVE-2000-0631

The CVE-2000-0631 entry concerns an IIS administrative script that was in IIS 3.0 and later included in IIS 4.0 and 5.0. The vulnerability allows remote attackers to cause a denial of service by accessing the script without a specific argument (the Absent Directory Browser Argument). The connecte...

CVE-2000-0596

Summary: The CVE-2000-0596 issue involves Internet Explorer (IE 5.x/IE 5.01) opening Microsoft Access database/project files via HTML OBJECT tags without warning, enabling remote code execution via embedded VBA/macro. Affected components: IE’s handling of OBJECT tags referencing Access file types...

CVE-2000-0489

Technical details are not publicly available in the provided connected documents. Monitor for updates; no exposed exploit details, affected versions, or root-cause specifics are supplied here.

CVE-2000-0458

The MSWordView application in IMP creates world-readable files in the /tmp directory, which allows other local users to read potentially sensitive information...

CVE-2000-0627

BlackBoard CourseInfo 4.0 is affected by an authentication flaw that allows local users to modify CourseInfo database information and gain privileges by directly calling supporting CGI programs such as user_update_passwd.pl and user_update_admin.pl. The provided documents do not include remediati...

CVE-2000-0733

CVE-2000-0733 affects the Telnetd server on IRIX 5.2–6.1, where the service fails to properly sanitize user-supplied format strings in the IAC-SB-TELOPT_ENVIRON request. This leads to a remote code execution condition via a crafted long RLD variable, enabling arbitrary commands on vulnerable syst...

CVE-2000-0193

The CVE-2000-0193 entry describes a local privilege escalation in Dosemu on Corel Linux 1.0 due to the default configuration, which allows local users to execute the system.com program and gain privileges. Root cause: default config enabling system.com execution. Impact: local users gain privileg...

CVE-2000-0553

The vulnerability affects IPFilter firewall versions 3.4.3 and earlier. A race condition occurs when overlapping 'return-rst' and 'keep state' rules are configured, which can allow remote attackers to bypass access restrictions. The available documents describe the affected component and the cond...

CVE-2000-0533

Vulnerability in cvconnect in SGI IRIX WorkShop allows local users to overwrite arbitrary files...

CVE-2000-0225

CVE-2000-0225 involves the Pocsag POC32 program, where the remote service port is accessible even when the option to restrict it is disabled. Connected data from Nessus indicates a default password vulnerability: remote login to the POC32 service with the password “password” enables access to dec...

CVE-2000-0472

Buffer overflow in innd 2.2.2 allows remote attackers to execute arbitrary commands via a cancel request containing a long message ID...

CVE-2000-0585

CVE-2000-0585 affects the ISC DHCP client program dhclient. The flaw allows remote attackers to execute arbitrary commands via shell metacharacters in DHCP responses. CVSS-2.0 base score is 10.0 (NETWORK, LOW ATTACK, NONE AUTH, C/I/A = COMPLETE). No remediation details are provided in the connect...

CVE-2000-0761

CVE-2000-0761 affects the OS/2 Warp 4.5 FTP server. The vulnerability allows a remote attacker to cause a denial of service by sending a long username. The root cause is implied to be improper input handling that leads to resource exhaustion. The provided documents do not specify a vendor patch, ...

CVE-2000-0725

Zope before 2.2.1 does not properly restrict access to the getRoles method, which allows users who can edit DTML to add or modify roles by modifying the roles list that is included in a request...

CVE-2000-0733

Telnetd telnet server in IRIX 5.2 through 6.1 does not properly cleans user-injected format strings, which allows remote attackers to execute arbitrary commands via a long RLD variable in the IAC-SB-TELOPTENVIRON request...