CVE-2000-0430

The provided documents identify CVE-2000-0430 as a flaw in Cart32 where remote attackers can access sensitive debugging information by appending /expdate to the URL. Affected component: Cart32 (web/URL handling). Root cause: improper handling of URL paths leading to exposure of debugging data; im...

CVE-2000-0550

CVE-2000-0550 concerns Kerberos 4 KDC memory handling. The vulnerability is a double-free of memory in the Kerberos 4 KDC, enabling a remote attacker to cause a denial of service . The affected component is the Kerberos 4 KDC program; root cause is improper memory deallocation leading to potentia...

CVE-2000-0529

CVE-2000-0529 affects Net Tools PKI Server. The vulnerability permits remote denial-of-service via an excessively long HTTP request. The provided documents do not specify the exact root cause, affected versions, or remediation steps. Exploitation status or in-the-wild details are not stated in th...

CVE-2000-0518

Internet Explorer 4.x and 5.x does not properly verify all contents of an SSL certificate if a connection is made to the server via an image or a frame, aka one of two different "SSL Certificate Validation" vulnerabilities...

CVE-2000-0733

Telnetd telnet server in IRIX 5.2 through 6.1 does not properly cleans user-injected format strings, which allows remote attackers to execute arbitrary commands via a long RLD variable in the IAC-SB-TELOPTENVIRON request...

CVE-2000-0490

CVE-2000-0490 : Buffer overflow in the NetWin DSMTP 2.7q (NetWin dmail) allows remote attackers to execute arbitrary commands via a long ETRN request. Affected component is the DSMTP server; root cause is a buffer overflow in processing the ETRN arguments, leading to potentially arbitrary code ex...

CVE-2000-0651

The CVE-2000-0651 issue concerns the ClientTrust component of Novell BorderManager. The affected element is the authentication request/response flow, where origin verification is insufficient. This allows remote attackers to impersonate another user by replaying authentication messages exchanged ...

CVE-2000-0445

The CVE-2000-0445 issue affects PGP 5.x on Unix-like systems where non-interactive (batch) key generation via pgpk can use insufficient randomness collected from /dev/random. The root cause is how PGP v5.0 processes entropy when generating keys in unattended mode, potentially producing weak, pred...

CVE-2000-0094

The CVE-2000-0094 entry concerns BSD procfs allowing local privilege escalation to root by manipulating the /proc/pid/mem interface through a modified file descriptor for stderr. The vulnerability is rooted in the procfs interface and enables a local attacker to gain full privileges, as described...

CVE-2000-0497

The CVE-2000-0497 issue affects IBM WebSphere server 3.0.2, where a remote attacker can view the source code of a JSP program by requesting a URL that serves a JSP extension in upper case. The root cause is case-insensitive handling of JSP extensions, allowing source disclosure over the network. ...

CVE-2000-0471

CVE-2000-0471 is a Solaris vulnerability where a buffer overflow in ufsrestore during interactive extraction can allow a local user to gain root privileges via long pathnames in the dump file. The CERT page notes multiple SunOS patches (e.g., 103261-08, 103262-08, 103640-35, 105722-07, 106793-07,...

CVE-2000-0597: Undefined Security Weakness

Microsoft Office 2000 Excel and PowerPoint and PowerPoint 97 are marked as safe for scripting, which allows remote attackers to force Internet Explorer or some email clients to save files to arbitrary locations via the Visual Basic for Applications VBA SaveAs function, aka the "Office HTML Script...

CVE-2000-0621: Undefined Security Weakness

Microsoft Outlook 98 and 2000, and Outlook Express 4.0x and 5.0x, allow remote attackers to read files on the client's system via a malformed HTML message that stores files outside of the cache, aka the "Cache Bypass" vulnerability...

@stake Advisory: All-Mail buffer overrun vulnerability (A101200-2 )

The signature was botched on the first one. Please use this is possible. -weld -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake Inc. www.atstake.com Security Advisory Advisory Name: All-Mail buffer overrun vulnerability Release Date: 10/12/2000 Application: Nevis Systems All-Mail 1.1 Platform...

CVE-2000-0737: Undefined Security Weakness

The Service Control Manager SCM in Windows 2000 creates predictable named pipes, which allows a local user with console access to gain administrator privileges, aka the "Service Control Manager Named Pipe Impersonation" vulnerability...

CVE-2000-0771: Undefined Security Weakness

Microsoft Windows 2000 allows local users to cause a denial of service by corrupting the local security policy via malformed RPC traffic, aka the "Local Security Policy Corruption" vulnerability...

CVE-2000-0765: Undefined Security Weakness

Buffer overflow in the HTML interpreter in Microsoft Office 2000 allows an attacker to execute arbitrary commands via a long embedded object tag, aka the "Microsoft Office HTML Object Tag" vulnerability...

CVE-2000-0637: Undefined Security Weakness

Microsoft Excel 97 and 2000 allows an attacker to execute arbitrary commands by specifying a malicious .dll using the Register.ID function, aka the "Excel REGISTER.ID Function" vulnerability...

CVE-2000-0475: Undefined Security Weakness

Windows 2000 allows a local user process to access another user's desktop within the same windows station, aka the "Desktop Separation" vulnerability...

CVE-2000-0663: Undefined Security Weakness

The registry entry for the Windows Shell executable Explorer.exe in Windows NT and Windows 2000 uses a relative path name, which allows local users to execute arbitrary commands by inserting a Trojan Horse named Explorer.exe into the %Systemdrive% directory, aka the "Relative Shell Path"...