CVE-2000-0145

The CVE-2000-0145 issue affects gnucash on Debian GNU/Linux via the libguile.so library installed with world-writable permissions. The root cause is a world-writable libguile.so, which could allow unauthorized modifications to the file. Impact is described as enabling modification of the library,...

CVE-2000-0198

CVE-2000-0198 affects the MERCUR mail server suite’s POP3 and IMAP servers. The issue is a buffer overflow that allows remote attackers to cause a denial of service. The public documents cite a base severity of MEDIUM (CVSS v2.0: AV:N/AC:L/Au:N/C:N/I:N/A:P) with a network attack vector and no aut...

CVE-2000-0203

CVE-2000-0203 affects the Trend Micro OfficeScan client, specifically the tmlisten.exe component. A remote attacker can cause a denial of service by sending malformed data to TCP port 12345, with no authentication required. The issue is classified as a network-based DoS with low attack complexity...

CVE-2000-0023

The CVE-2000-0023 issue affects the Lotus Domino HTTP server, where a buffer overflow in URL processing can be exploited by remote attackers to cause a denial of service by sending a long URL (notably via long /cgi-bin relative URLs). The Nessus plugin for this CVE corroborates a DoS impact from ...

CVE-2000-0188

EZShopper 3.0’s search.cgi is vulnerable to directory traversal and command injection. Remote attackers can read arbitrary files via a .. path and may execute shell commands through metacharacters. The Nessus entry also mentions directory traversal in loadpage.cgi and possible arbitrary command e...

CVE-2000-0040

The CVE-2000-0040 issue affects glFtpD, where local users can gain privileges by supplying metacharacters in the SITE ZIPCHK command. Documentation in PT-1999-1848 notes that affected versions are not specified and provides no information about a fix. Overall, the vulnerability arises from improp...

CVE-2000-0022

Lotus Domino HTTP server does not properly disable anonymous access for the cgi-bin directory...

CVE-2000-0139

Internet Anywhere POP3 Mail Server allows local users to cause a denial of service via a malformed RETR command...

CVE-2000-0187

EZShopper 3.0 contains directory traversal in loadpage.cgi (and related scripts per Nessus data) that allows remote attackers to read arbitrary files via .. traversal and may permit command execution via shell metacharacters. Affected component is EZShopper’s web CGI handling; root cause is impro...

CVE-2000-0003

Buffer overflow in UnixWare rtpm program allows local users to gain privileges via a long environmental variable...

CVE-2000-0214

FTP Explorer uses weak encryption for storing the username, password, and profile of FTP sites...

CVE-2000-0098

Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file that does not exist...

CVE-2000-0204

The CVE-2000-0204 entry concerns the Trend Micro OfficeScan client. It describes a denial-of-service condition triggered by remote attackers making 5 connections to port 12345, causing CPU utilization to reach 100%. The provided documents do not specify the underlying root cause, affected version...

CVE-2000-0152

CVE-2000-0152 concerns remote denial of service in Novell BorderManager 3.5 . According to the sources, a user can trigger a DoS by pressing the enter key over a telnet session to port 2000 . The NVD entry confirms the vulnerability exists and notes the impact as a partial loss of availability wi...

CVE-2000-0039

CVE-2000-0039 affects AltaVista search engine via a directory traversal vulnerability in the query.cgi CGI program, allowing remote attackers to read files above the document root by exploiting a .. (dot dot) parameter. The issue is documented across multiple sources (NVD, CVE List, Nessus listin...

CVE-2000-0029

Technical details about CVE-2000-0029 are not publicly provided in the supplied documents; only the basic description is available. Monitor for updates.

CVE-2000-0219

Red Hat 6.0 is affected: local root escalation via booting into single-user mode and interrupting at the password prompt. The Nessus entry notes the attacker with physical access can gain root via LILO/GRUB boot menus. Remediation guidance in the provided docs is limited; consider disabling or pr...

CVE-2000-0037

Technical details for CVE-2000-0037 are not publicly provided in the connected documents; only the high-level description is available. Monitor for updates.

CVE-2000-0041

CVE-2000-0041 involves Macintosh systems that generate large ICMP datagrams in response to malformed datagrams, enabling ICMP amplification for flood attacks. The CVE entry documents an impact of partial availability with a network attack vector and low attack complexity, resulting in a potential...

CVE-2000-0148

CVE-2000-0148 : MySQL 3.22 allows remote attackers to bypass password authentication and read a database by exploiting a short check string. The vulnerability is triggered remotely over the network with low attack complexity and results in partial confidentiality and integrity impact (and partial...