7988 matches found
CVE-2000-0202
Microsoft SQL Server 7.0 and Microsoft Data Engine MSDE 1.0 allow remote attackers to gain privileges via a malformed Select statement in an SQL query...
CVE-2000-0172
The CVE concerns the mtr program, where a seteuid call is used only when attempting to drop privileges, enabling local users to gain root privileges. The available sources confirm a local-privilege escalation risk but do not provide concrete exploit details, affected versions, or remediation step...
CVE-2000-0215
CVE-2000-0215 : Vulnerability in the SCO cu program on UnixWare 7.x allows local users to gain privileges (CVSS v2 base score 7.2; impact: confidentiality, integrity, and availability). The available sources describe a local privilege escalation but do not specify the root cause, vulnerable compo...
CVE-2000-0212
CVE-2000-0212 affects InterAccess TelnetD Server 4.0. The vulnerability enables a remote denial of service via malformed terminal client configuration information. Impact is described as Partial Availability (CVSS: 5.0) with network access, low complexity, no authentication. No remediation detail...
CVE-2000-0224
The CVE-2000-0224 entry refers to ARCserve agent on SCO UnixWare 7.x. The vulnerability is a local privilege escalation via a symlink attack that could allow a local attacker to obtain root privileges. The description clearly states the affected product/component and the root cause (symlink-relat...
CVE-2000-0211
CVE-2000-0211 affects Microsoft Windows Media Server; a DoS can be triggered by a sequence of misordered handshake packets to the Windows Media Service (the OpenVAS/NASL entry notes port 1755). The underlying issue is a malformed/incorrect handshake sequence that can crash the server. Description...
CVE-2000-0222
The installation for Windows 2000 does not activate the Administrator password until the system has rebooted, which allows remote attackers to connect to the ADMIN$ share without a password until the reboot occurs...
CVE-2000-0202
CVE-2000-0202 affects Microsoft SQL Server 7.0 and Microsoft Data Engine (MSDE) 1.0. A malformed SELECT statement in an SQL query allows remote attackers to gain privileges. The connected OpenVAS entry corroborates multiple MSSQL vulnerabilities; however, exploitation details, affected versions b...
CVE-2000-0217
Technical details about CVE-2000-0217 are not provided in the connected documents. The supplied materials do not specify affected products/versions, root cause, or remediation. Monitor for updates in the available sources.
CVE-2000-0273
PCAnywhere allows remote attackers to cause a denial of service by terminating the connection before PCAnywhere provides a login prompt...
All Users startup folder left open if unattended install and OEMP reinstall=1
About a month ago I posted the following to the win2ksecadvice list. However, I received no response. I thought I'd try again since I consider this problem to be pretty serious since it will allow any user to introduce a code stream on another user. I recently noticed a problem with Windows 2000...
Проблемы с правами на папки в Win2K при OEM-инсталяции
Если в unattend-инсталяции Windows 2000 используется опция OEMPreinstall, то не накладываются ограничения на доступ к директориям с профилями All Users и Default User...
CVE-2000-0298
The unattended installation of Windows 2000 with the OEMPreinstall option sets insecure permissions for the All Users and Default Users directories...
CVE-2000-0279
BeOS allows remote attackers to cause a denial of service via malformed packets whose length field is less than the length of the headers...
CVE-2000-0301
Ipswitch IMAIL server 6.02 and earlier allows remote attackers to cause a denial of service via the AUTH CRAM-MD5 command...
Remote DoS Attack in Windows 2000/NT 4.0 TCP/IP Print Request Server Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Remote DoS Attack in Windows 2000/NT 4.0 TCP/IP Print Request Server Vulnerability USSR Advisory Code: USSR-2000037 Release Date: March 28, 2000 Systems Affected: Microsoft Windows NT 4.0 Workstation Microsoft Windows NT 4.0 Server Microsoft Windows N...
CVE-2000-0280
Buffer overflow in the RealNetworks RealPlayer client versions 6 and 7 allows remote attackers to cause a denial of service via a long Location URL...
CVE-2000-0297
Allaire Forums 2.0.5 allows remote attackers to bypass access restrictions to secure conferences via the rightAccessAllForums or rightModerateAllForums variables...