CVE-2000-0704

CVE-2000-0704 affects SGI WorldView (Omron Wnn) on IRIX. A root-level buffer overflow in the WorldView WNN server can be triggered remotely by sending oversized JS_OPEN, JS_MKDIR, or JS_FILE_INFO commands, allowing arbitrary commands execution with root privileges on vulnerable installations wher...

CVE-2000-0774

The sample Java servlet "test" in Bajie HTTP web server 0.30a reveals the real pathname of the web document root...

CVE-2000-0687

CVE-2000-0687 affects Auction Weaver CGI script LITE (1.0–1.04). A directory traversal flaw in the catdir parameter allows remote attackers to read arbitrary files. The vulnerability is remotely exploitable and was reported for UNIX and Windows NT platforms. The issue arises in versions 1.0 throu...

CVE-2000-0772

The CVE-2000-0772 entry concerns Tumbleweed Messaging Management System (MMS) 4.6 and earlier (formerly Worldtalk Worldsecure) that creates a default account named “sa” with no password, enabling unauthenticated access. The NVD entry attributes a CVSSv2 base score of 7.5 (HIGH) with network attac...

CVE-2000-0757

The CVE-2000-0757 entry concerns the Aptis Totalbill system: the sysgen service does not perform authentication, enabling remote attackers to gain root privileges by issuing commands to the service. This root-privilege escalation is described consistently across NVD/CVE records. The vulnerability...

CVE-2000-0760

Affected software: Jakarta Tomcat 3.0 and 3.1 under Apache. Vulnerability: The Snoop servlet exposes sensitive system information when a remote attacker requests a nonexistent URL with a .snp extension, leading to information disclosure. Root cause / details: Information disclosure vulnerability ...

CVE-2000-0688

CVE-2000-0688 concerns Subscribe Me LITE. The vulnerability is that it does not properly authenticate password-change attempts, allowing a remote attacker to gain privileges for the Account Manager by directly invoking subscribe.pl with the setpwd parameter. The available connected documents conf...

CVE-2000-0724

CVE-2000-0724 involves the go-gnome Helix GNOME pre-installer. The vulnerability arises from a symlink attack in /tmp that lets local users overwrite arbitrary files, including uudecode, snarf, and some installer files. The described impact is complete confidentiality, integrity, and availability...

CVE-2000-0723

The CVE-2000-0723 entry concerns Helix GNOME Updater (helix-update) version 0.5 and earlier, where improper handling of /tmp leads to local users creating empty system configuration files (e.g., /etc/config.d/bashrc, /etc/config.d/csh.cshrc, /etc/rc.config). This vulnerability arises from inadequ...

CVE-2000-0755

Vulnerability in the newgrp command in HP-UX 11.00 allows local users to gain privileges...

CVE-2000-0696

The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests to its supporting CGI scripts, which allows remote attackers to add user accounts to the interface by directly calling the admin CGI script...

CVE-2000-0719

CVE-2000-0719 concerns VariCAD 7.0, where world-writable files enable local users to replace VariCAD binaries with a Trojan horse program. The vulnerability arises from permissions/ownership allowing overwrite of executable components. Reported impact is local code integrity compromise; no exploi...

CVE-2000-0746

The CVE-2000-0746 entry concerns a Microsoft IIS XSS vulnerability affecting IIS 4.0 and 5.0. The issue arises from improper handling of unquoted script content in links returned within error messages, allowing a malicious site to craft a link that executes scripts in the context of a trusted sit...

CVE-2000-0789

The CVE-2000-0789 entry targets WinU 5.x and earlier. The vulnerability arises because the product stores its configuration password with weak encryption, enabling local users to decrypt the password and gain privileges. This is based on the NVD/CVE descriptions indicating weak encryption used fo...

CVE-2000-0724

The go-gnome Helix GNOME pre-installer allows local users to overwrite arbitrary files via a symlink attack on various files in /tmp, including uudecode, snarf, and some installer files...

CVE-2000-0755

Vulnerability CVE-2000-0755 affects HP-UX 11.00 in the newgrp command, enabling local privilege escalation. The connected records confirm the affected product (HP-UX 11.00) and the vulnerable component (newgrp), with the impact described as local privilege gain. The exact root cause, exploitation...

CVE-2000-0802

The vulnerability CVE-2000-0802 affects the BAIR program. It does not properly restrict access to the Internet Explorer Internet options menu, allowing a local user to obtain access to the menu by modifying the registry key that starts BAIR. The issue is described in public records (NVD CVE entry...

CVE-2000-0789

WinU 5.x and earlier uses weak encryption to store its configuration password, which allows local users to decrypt the password and gain privileges...

CVE-2000-0697

The connected Nessus entry identifies a concrete vulnerability: Sun AnswerBook2 Web Server dwhttpd is vulnerable to a GET request remote format string attack. Affected versions include dwhttp/4.0.2a7a and dwhttpd/4.1a6. Successful exploitation can crash the server or allow arbitrary code executio...

CVE-2000-0736

Becky! Internet Mail client up to version 1.26.04 is affected by a buffer overflow when processing a long Content-type: MIME header while forwarding messages, allowing remote denial of service. The vulnerability is triggered in the MIME header handling and results in partial availability impact. ...