8754 matches found
CVE-2000-0722
The CVE-2000-0722 entry concerns Helix GNOME Updater (helix-update) version 0.5 and earlier. It describes a local-privilege issue where an attacker can cause the installation of arbitrary RPM packages by pre-creating the /tmp/helix-install directory before the package installation sequence begins...
CVE-2000-0734
CVE-2000-0734 affects eEye IRIS 1.01 beta and allows remote actors to trigger a denial of service by exhausting resources through a large number of UDP connections. The available documents describe the affected product and the general impact (DoS) but do not provide explicit root-cause details, a...
CVE-2000-0756
CVE-2000-0756 affects Microsoft Outlook 2000, where the application does not properly process long or malformed vCard (.vcf) fields, enabling a denial of service. The root cause is improper handling of vCard fields during parsing. The available documents do not provide exploitable details, proof-...
CVE-2000-0774
The CVE-2000-0774 entry concerns Bajie HTTP web server 0.30a, where the sample Java servlet “test” discloses the real pathname of the web document root. The vulnerability is an information disclosure in which an ordinary request to the test servlet reveals server-side directory paths. The connect...
CVE-2000-0775
The CVE concerns RobTex Viking server before version 1.06-370, where a buffer overflow in the HTTP request handling (long GET requests and long If-Modified-Since/If-Range headers) allows remote attackers to cause denial of service or execute arbitrary commands. The vulnerability is triggered by o...
CVE-2000-0769
The CVE-2000-0769 entry concerns O'Reilly WebSite Pro 2.3.7 where uploader.exe is installed with execute permissions for all users, enabling remote attackers to create and execute arbitrary files by directly calling uploader.exe. This describes a direct misuse of file permissions leading to arbit...
CVE-2000-0735
Becky! Internet Mail client
CVE-2000-0791
CVE-2000-0791 describes a Trustix vulnerability where the httpsd binary (Apache-SSL) is installed with world-writeable permissions, enabling local users to replace it with a Trojan horse. The root cause is improper permissions on the httpsd executable, allowing local write access and substitution...
CVE-2000-0680
The CVE-2000-0680 entry concerns the CVS 1.10.8 server, where the server fails to restrict creation of arbitrary Checkin.prog or Update.prog programs. This allows remote CVS committers to modify or create Trojan horse programs named Checkin.prog or Update.prog and then perform a CVS commit action...
CVE-2000-0709
The CVE-2000-0709 issue affects Microsoft FrontPage 2000 Server Extensions 1.1, specifically the shtml.exe component. A remote attacker can trigger a denial-of-service condition by requesting a URL whose path includes a standard DOS device name, leading to partial availability impact as described...
CVE-2000-0710
Affected product/component: Microsoft FrontPage 2000 Server Extensions 1.1, shtml.exe. Vulnerability: Remote attackers can determine the physical path of server components by requesting an invalid URL whose name includes a standard DOS device name. Impact: Information disclosure (partial). Root c...
CVE-2000-0801
CVE-2000-0801 describes a buffer overflow in HP-UX 11.00’s bdf program that can be triggered by a long -t option, allowing local users to gain root privileges . The root cause is an overflow in the bdf implementation. The affected software is HP-UX 11.00 and the bdf utility; no remediation versio...
CVE-2000-0713
CVE-2000-0713 describes a buffer overflow in Adobe Acrobat 4.05 family products (Acrobat/Reader/Business Tools/Fill In) related to handling PDF CID fonts via long /Registry and /Ordering specifiers. The underlying flaw is unchecked bounds during processing of these entries, enabling arbitrary cod...
CVE-2000-0680
The CVS 1.10.8 server does not properly restrict users from creating arbitrary Checkin.prog or Update.prog programs, which allows remote CVS committers to modify or create Trojan horse programs with the Checkin.prog or Update.prog names, then performing a CVS commit action...
CVE-2000-0688
Subscribe Me LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the subscribe.pl script with the setpwd parameter...
CVE-2000-0760
The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp extension...
CVE-2000-0775
Buffer overflow in RobTex Viking server earlier than 1.06-370 allows remote attackers to cause a denial of service or execute arbitrary commands via a long HTTP GET request, or long Unless-Modified-Since, If-Range, or If-Modified-Since headers...
CVE-2000-0802
The BAIR program does not properly restrict access to the Internet Explorer Internet options menu, which allows local users to obtain access to the menu by modifying the registry key that starts BAIR...
CVE-2000-0704
CVE-2000-0704 affects SGI WorldView (Omron Wnn) on IRIX. A root-level buffer overflow in the WorldView WNN server can be triggered remotely by sending oversized JS_OPEN, JS_MKDIR, or JS_FILE_INFO commands, allowing arbitrary commands execution with root privileges on vulnerable installations wher...