CVE-2000-0029

Technical details about CVE-2000-0029 are not publicly provided in the supplied documents; only the basic description is available. Monitor for updates.

CVE-2000-0098

CVE-2000-0098 describes a path-disclosure vulnerability in Microsoft Index Server/IIS WebHits: remote attackers can determine the real path of a web directory by requesting non-existent Internet Data Query files. OpenVAS notes the issue in MS00-006 (WebHits ISAPI filter) and IDA/IDQ path disclosu...

CVE-2000-0156

Technical details (affected products, vulnerable components, and exploit information) are not provided in the supplied documents. Monitor for updates.

CVE-2000-0190

CVE-2000-0190 affects the AOL Instant Messenger (AIM) client. The vulnerability arises when processing a message containing a malformed ASCII value, which can cause a denial of service. The NVD metrics report a CVSSv2 base score of 5.0 (Medium) with network attack vector, low attack complexity, a...

CVE-2000-0219

Red Hat 6.0 is affected: local root escalation via booting into single-user mode and interrupting at the password prompt. The Nessus entry notes the attacker with physical access can gain root via LILO/GRUB boot menus. Remediation guidance in the provided docs is limited; consider disabling or pr...

CVE-2000-0214

CVE-2000-0214 : The incident is tied to FTP Explorer, which stores usernames, passwords, and FTP site profiles using weak encryption. The available data describe the vulnerability as a local issue with partial confidentiality and integrity impact, and a base severity of MEDIUM (score 4.6). No exp...

CVE-2000-0187

EZShopper 3.0 contains directory traversal in loadpage.cgi (and related scripts per Nessus data) that allows remote attackers to read arbitrary files via .. traversal and may permit command execution via shell metacharacters. Affected component is EZShopper’s web CGI handling; root cause is impro...

CVE-2000-0177

CVE-2000-0177 concerns DNSTools CGI applications where remote attackers can execute arbitrary commands due to shell metacharacters. The issue is described across NVD and CVE records as enabling complete compromise (C, I, A) with network access and no authentication, yielding a very high risk (CVS...

CVE-2000-0149

Zeus Web Server (versions 3.1.x–3.3.5) contains an information disclosure flaw where a null byte (%00) at the end of a URL allows remote attackers to view the source code of CGI scripts. Root cause: improper handling of CGI input leading to source disclosure. Impact is information exposure of CGI...

CVE-2000-0037

Technical details for CVE-2000-0037 are not publicly provided in the connected documents; only the high-level description is available. Monitor for updates.

CVE-2000-0177

DNSTools CGI applications allow remote attackers to execute arbitrary commands via shell metacharacters...

CVE-2000-0088

CVE-2000-0088 describes a buffer overflow in the conversion utilities for Word 5 documents (Japanese, Korean and Chinese) that allows a local attacker to execute arbitrary commands. The vulnerability is identified as the "Malformed Conversion Data" issue. The available references indicate a high ...

CVE-2000-0139

The CVE-2000-0139 entry concerns Internet Anywhere POP3 Mail Server where local users can trigger a denial of service through a malformed RETR command. The vulnerability is local in scope with a low base score (2.1) and partial availability impact; no explicit exploit details or mitigations are p...

CVE-2000-0216

Microsoft email clients in Outlook, Exchange, and Windows Messaging automatically respond to Read Receipt and Delivery Receipt tags, which could allow an attacker to flood a mail system with responses by forging a Read Receipt request that is redirected to a large distribution list...

CVE-2000-0150

Check Point FireWall-1 is affected by CVE-2000-0150, where the FTP PASV handling flaw in stateful inspection allows remote attackers to bypass FTP data-connection restrictions by causing the firewall to misinterpret crafted packets as a valid PASV response. The vulnerability stems from layering v...

CVE-2000-0025

The CVE-2000-0025 entry concerns IIS 4.0 and Site Server 3.0, where remote attackers can read ASP source code if the target file resides in a virtual directory whose name includes extensions such as .com, .exe, .sh, .cgi, or .dll (the so‑called Virtual Directory Naming vulnerability). The affecte...

CVE-2000-0220

ZoneAlarm is reported to send sensitive system and network information in cleartext to the Zone Labs server when a user requests more information about an event. The PT-2000-1202 entry attributes the vulnerability to ZoneAlarm (affected versions not specified) and reiterates that the issue involv...

CVE-2000-0205

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2000-0199

CVE-2000-0199 affects Microsoft SQL Server 7.0 via Enterprise Manager when the “Always prompt for login name and password” option is not set; the login credentials are stored with weak encryption. The connected Nessus entry also describes a potential local privilege escalation by authenticated us...

CVE-2000-0213

The Sambar server is affected by CVE-2000-0213 due to batch files in the CGI directory (hello.bat and echo.bat) that allow remote attackers to execute commands via shell metacharacters. The Nessus plugin confirms these scripts enable arbitrary code execution with the web server’s privileges, iden...