CVE-2000-0763

CVE-2000-0763 concerns xlockmore and xlockf, where improper cleansing of user-supplied format strings can enable local users to gain root privileges through the -d option. The NVD entry confirms the impact as local privilege escalation with complete confidentiality, integrity, and availability im...

CVE-2000-0708

Affected product: Pragma Systems TelnetServer 2000, version 4.0. Vulnerability: buffer overflow in the rexec port handling, triggered by a long series of null characters. Impact: remote attacker could cause a denial of service. Exploitation status: not provided in the documents. Remediation: no f...

CVE-2000-0640

CVE-2000-0640 affects Guild FTPd and describes a path traversal vulnerability where an attacker can use dot-dot sequences to determine whether files exist outside the FTP root. The issue arises because the server returns different error messages based on file existence, enabling remote discovery ...

CVE-2000-0475

Windows 2000 allows a local user process to access another user's desktop within the same windows station, aka the "Desktop Separation" vulnerability...

CVE-2000-0786

GNU userv 1.0.0 and earlier are affected by an issue where improper file descriptor swapping can corrupt the USERV_GROUPS and USERV_GIDS environment variables, potentially allowing local users to bypass some access restrictions. The public documentation identifies the affected component and the c...

CVE-2000-0652

The CVE-2000-0652 entry describes a vulnerability in IBM WebSphere where remote attackers can read source code of executable web files by directly invoking the default InvokerServlet with a URL containing the string “/servlet/file.” This is a network-accessible issue that exposes partial confiden...

CVE-2000-0447

CVE-2000-0447 describes a buffer overflow in WebShield SMTP 4.5.44’s remote management service. A long configuration parameter passed to the WebShield remote management interface can lead to remote command execution. The vulnerability is triggered via the management/config parameter (remote servi...

CVE-2000-0146

The CVE-2000-0146 issue affects the Java Server in Novell GroupWise Web Access Enhancement Pack. A remote attacker can cause a denial of service by sending an excessively long URL to the servlet, leading to availability impact. Connected sources corroborate a URL-length-based DoS vector (e.g., lo...

CVE-2000-0630

Summary: IIS 4.0 and 5.0 can disclose fragments of source code by requesting a known file with a appended +.htr, via the ISAPI-based .HTR handling in IIS. What’s affected: Microsoft Internet Information Services (IIS) 4.0/5.0, specifically the mechanism that processes .HTR ISAPI scripts (ISM.DLL)...

CVE-2000-0146

The Java Server in the Novell GroupWise Web Access Enhancement Pack allows remote attackers to cause a denial of service via a long URL to the servlet...

CVE-2000-0549

CVE-2000-0549 affects Kerberos 4 KDC by not properly checking for null termination in AUTH_MSG_KDC_REQUEST, enabling remote attackers to cause denial of service via a malformed request. The available sources describe the issue as a null-termination handling flaw in the KDC protocol message proces...

CVE-2000-0430

The provided documents identify CVE-2000-0430 as a flaw in Cart32 where remote attackers can access sensitive debugging information by appending /expdate to the URL. Affected component: Cart32 (web/URL handling). Root cause: improper handling of URL paths leading to exposure of debugging data; im...

CVE-2000-0550

CVE-2000-0550 concerns Kerberos 4 KDC memory handling. The vulnerability is a double-free of memory in the Kerberos 4 KDC, enabling a remote attacker to cause a denial of service . The affected component is the Kerberos 4 KDC program; root cause is improper memory deallocation leading to potentia...

CVE-2000-0529

CVE-2000-0529 affects Net Tools PKI Server. The vulnerability permits remote denial-of-service via an excessively long HTTP request. The provided documents do not specify the exact root cause, affected versions, or remediation steps. Exploitation status or in-the-wild details are not stated in th...

CVE-2000-0518

Internet Explorer 4.x and 5.x does not properly verify all contents of an SSL certificate if a connection is made to the server via an image or a frame, aka one of two different "SSL Certificate Validation" vulnerabilities...

CVE-2000-0094

The CVE-2000-0094 entry concerns BSD procfs allowing local privilege escalation to root by manipulating the /proc/pid/mem interface through a modified file descriptor for stderr. The vulnerability is rooted in the procfs interface and enables a local attacker to gain full privileges, as described...

CVE-2000-0490

CVE-2000-0490 : Buffer overflow in the NetWin DSMTP 2.7q (NetWin dmail) allows remote attackers to execute arbitrary commands via a long ETRN request. Affected component is the DSMTP server; root cause is a buffer overflow in processing the ETRN arguments, leading to potentially arbitrary code ex...

CVE-2000-0445

The CVE-2000-0445 issue affects PGP 5.x on Unix-like systems where non-interactive (batch) key generation via pgpk can use insufficient randomness collected from /dev/random. The root cause is how PGP v5.0 processes entropy when generating keys in unattended mode, potentially producing weak, pred...

CVE-2000-0725

CVE-2000-0725 affects Zope prior to 2.2.1. The vulnerability arises in the getRoles method, where access is insufficiently restricted, allowing a user who can edit DTML to modify the roles list included in a request and thereby add or modify roles. The issue is described across multiple connected...

CVE-2000-0651

The CVE-2000-0651 issue concerns the ClientTrust component of Novell BorderManager. The affected element is the authentication request/response flow, where origin verification is insufficient. This allows remote attackers to impersonate another user by replaying authentication messages exchanged ...