7988 matches found
CVE-2000-0264
Panda Security 3.0 with registry editing disabled allows users to edit the registry and gain privileges by directly executing a .reg file or using other methods...
CVE-2000-0286
X fontserver xfs allows local users to cause a denial of service via malformed input to the server...
CVE-2000-0263
The X font server xfs in Red Hat Linux 6.x allows an attacker to cause a denial of service via a malformed request...
CVE-2000-0285
Buffer overflow in XFree86 3.3.x allows local users to execute arbitrary commands via a long -xkbmap parameter...
CVE-2000-0250
The crypt function in QNX uses weak encryption, which allows local users to decrypt passwords...
CVE-2000-0260
Buffer overflow in the dvwssr.dll DLL in Microsoft Visual Interdev 1.0 allows users to cause a denial of service or execute commands, aka the "Link View Server-Side Component" vulnerability...
PT-2000-1997 · Microsoft · Windows 98 +3
Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions 98, NT 4.0, 2000, and XP Description: The default configuration for the domain name resolver sets the QueryIpMatching parameter to 0, which causes Windows to accept DNS updates from hosts that it did not query,...
CVE-2000-0241
The CVE-2000-0241 entry concerns vqSoft vqServer, where passwords and other sensitive data are stored in cleartext in the server.cfg file. This exposed data can let an attacker gain privileges if they can read the configuration file. The available connected documentation confirms the issue, but d...
CVE-2000-0239
CVE-2000-0239 concerns the MERCUR WebView WebMail server. A buffer overflow is triggered by a long mail_user parameter in a GET request (e.g., /mmain.html&mail_user=…); this can cause a denial of service and, per the Nessus plugin, potentially allow arbitrary code execution on a remote host. Affe...
CVE-2000-0283
The default installation of IRIX Performance Copilot allows remote attackers to access sensitive system information via the pmcd daemon...
CVE-2000-0242
CVE-2000-0242 affects WindMail where the CGI component (windmail.exe) is vulnerable to remote command execution via shell metacharacters. The underlying issue allows an attacker over the network to read arbitrary files or execute arbitrary commands on the remote server through crafted input to th...
CVE-2000-0244
The CVE-2000-0244 entry concerns the Citrix ICA (Independent Computing Architecture) protocol, which uses weak encryption (XOR) for user authentication. According to the provided data, the vulnerability has a CVSS v2 base score of 10.0 (HIGH) with network attack vector, no authentication required...
CVE-2000-0261
The AVM KEN! web server allows remote attackers to read arbitrary files via a .. dot dot attack...
CVE-2000-0282
TalentSoft webpsvr daemon in the Web+ shopping cart application allows remote attackers to read arbitrary files via a .. dot dot attack on the webplus CGI program...
CVE-2000-0288
Infonautics getdoc.cgi allows remote attackers to bypass the payment phase for accessing documents via a modified form variable...
CVE-2000-0241
vqSoft vqServer stores sensitive information such as passwords in cleartext in the server.cfg file, which allows attackers to gain privileges...
CVE-2000-0227
The CVE-2000-0227 entry concerns the Linux 2.2.x kernel where the number of Unix domain sockets is not restricted by the wmem_max parameter. This allows a local attacker to cause a denial of service by requesting a large number of sockets. The linked sources confirm the affected platform and vuln...
CVE-2000-0253
The dansie shopping cart application cart.pl allows remote attackers to modify sensitive purchase information via hidden form fields...