8754 matches found
CVE-2000-0802
The vulnerability CVE-2000-0802 affects the BAIR program. It does not properly restrict access to the Internet Explorer Internet options menu, allowing a local user to obtain access to the menu by modifying the registry key that starts BAIR. The issue is described in public records (NVD CVE entry...
CVE-2000-0789
WinU 5.x and earlier uses weak encryption to store its configuration password, which allows local users to decrypt the password and gain privileges...
CVE-2000-0697
The connected Nessus entry identifies a concrete vulnerability: Sun AnswerBook2 Web Server dwhttpd is vulnerable to a GET request remote format string attack. Affected versions include dwhttp/4.0.2a7a and dwhttpd/4.1a6. Successful exploitation can crash the server or allow arbitrary code executio...
CVE-2000-0736
Becky! Internet Mail client up to version 1.26.04 is affected by a buffer overflow when processing a long Content-type: MIME header while forwarding messages, allowing remote denial of service. The vulnerability is triggered in the MIME header handling and results in partial availability impact. ...
CVE-2000-0798
CVE-2000-0798 affects IRIX 6.x when files reside on the xfs filesystem. The vulnerability arises because the truncate function does not properly check privileges, enabling local users to delete contents of arbitrary files. Public sources (NVD/NVD-linked entries) confirm the affected component as ...
CVE-2000-0752
Buffer overflows in brouted in FreeBSD and possibly other OSes allows local users to gain root privileges via long command line arguments...
CVE-2000-0715
Summary (CVE-2000-0715) : The vulnerability affects Red Hat Linux 6.2’s DiskCheck script (diskcheck.pl), a Powertools utility that alerts on near-capacity disks. Diskcheck.pl creates a temporary file in /tmp with a predictable name and runs with elevated privileges (setuid root). An attacker can ...
CVE-2000-0793
CVE-2000-0793 affects Norton AntiVirus 5.00.01C when used with the Novell Netware client, where the auto-protection service fails to restart after the first user logs off. The CVSS2 base metrics indicate a HIGH impact across confidentiality, integrity, and availability with network access and no ...
CVE-2000-0701
The vulnerability CVE-2000-0701 affects the Mailman project’s wrapper program in versions 2.0beta3 and 2.0beta4. The root cause is improper cleansing of untrusted format strings, which permits local privilege escalation. The NVD entry lists local attack vector with low complexity and partial impa...
CVE-2000-0690
Auction Weaver CGI script 1.02 and earlier is affected by a remote command execution vulnerability: an attacker can inject shell metacharacters into the fromfile parameter to execute arbitrary commands. According to the PacketStorm entry, a patch exists (Auction Weaver 1.05). The NVD entry confir...
CVE-2000-0794
CVE-2000-0794 is a buffer overflow in IRIX libgl.so that enables local users to gain root privileges by supplying an excessively long HOME environment variable to programs such as gmemusage and gr_osview. The root cause is improper handling of HOME leading to memory overflow and potential control...
CVE-2000-0691
The faxrunq and faxrunqd in the mgetty package allows local users to create or modify arbitrary files via a symlink attack which creates a symlink in from /var/spool/fax/outgoing/.lastrun to the target file...
CVE-2000-0757
The sysgen service in Aptis Totalbill does not perform authentication, which allows remote attackers to gain root privileges by connecting to the service and specifying the commands to be executed...
CVE-2000-0723
Helix GNOME Updater helix-update 0.5 and earlier does not properly create /tmp directories, which allows local users to create empty system configuration files such as /etc/config.d/bashrc, /etc/config.d/csh.cshrc, and /etc/rc.config...
CVE-2000-0687
Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. dot dot attack in the catdir parameter...
CVE-2000-0692
ISS RealSecure 3.2.1 and 3.2.2 are affected by a denial-of-service vulnerability where a remote attacker can trigger a flood of fragmented packets with the SYN flag set. The underlying issue is a handling flaw in processing fragmented traffic, leading to partial availability impact. Reported by N...
CVE-2000-0690
Auction Weaver CGI script 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the fromfile parameter...
CVE-2000-0715
DiskCheck script diskcheck.pl in Red Hat Linux 6.2 allows local users to create or overwrite arbitrary files via a symlink attack on a temporary file...
CVE-2000-0709
The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to cause a denial of service in some components by requesting a URL whose name includes a standard DOS device name...