CVE-2000-0201

The window.showHelp method in Internet Explorer 5.x does not restrict HTML help files .chm to be executed from the local host, which allows remote attackers to execute arbitrary commands via Microsoft Networking...

CVE-2000-0216

Microsoft email clients in Outlook, Exchange, and Windows Messaging automatically respond to Read Receipt and Delivery Receipt tags, which could allow an attacker to flood a mail system with responses by forging a Read Receipt request that is redirected to a large distribution list...

CVE-2000-0191

Axis StorPoint CD allows remote attackers to access administrator URLs without authentication via a .. dot dot attack...

CVE-2000-0176

The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the server by requesting a URL for a directory or file that does not exist...

CVE-2000-0196

Buffer overflow in mhshow in the Linux nmh package allows remote attackers to execute commands via malformed MIME headers in an email message...

CVE-2000-0203

The Trend Micro OfficeScan client tmlisten.exe allows remote attackers to cause a denial of service via malformed data to port 12345...

CVE-2000-0179

HP OpenView OmniBack 2.55 allows remote attackers to cause a denial of service via a large number of connections to port 5555...

CVE-2000-0204

The Trend Micro OfficeScan client allows remote attackers to cause a denial of service by making 5 connections to port 12345, which raises CPU utilization to 100%...

CVE-2000-0209

Buffer overflow in Lynx 2.x allows remote attackers to crash Lynx and possibly execute commands via a long URL in a malicious web page...

CVE-2000-0188

EZShopper 3.0 search.cgi CGI script allows remote attackers to read arbitrary files via a .. dot dot attack or execute commands via shell metacharacters...

CVE-2000-0170

Buffer overflow in the man program in Linux allows local users to gain privileges via the MANPAGER environmental variable...

CVE-2000-0212

InterAccess TelnetD Server 4.0 allows remote attackers to conduct a denial of service via malformed terminal client configuration information...

CVE-2000-0195

setxconf in Corel Linux allows local users to gain root access via the -T parameter, which executes the user's .xserverrc file...

CVE-2000-0160

The Microsoft Active Setup ActiveX component in Internet Explorer 4.x and 5.x allows a remote attacker to install software components without prompting the user by stating that the software's manufacturer is Microsoft...

CVE-2000-0167

IIS Inetinfo.exe allows local users to cause a denial of service by creating a mail file with a long name and a .txt.eml extension in the pickup directory...

CVE-2000-0154

The CVE-2000-0154 entry concerns the ARCserve agent in UnixWare, where a local attacker can modify arbitrary files via a symlink attack. The available connected records confirm Tcl/UnixWare context and the vulnerability’s local access vector with a high attack complexity and low base score (NVD m...

CVE-2000-0163

CVE-2000-0163 affects FreeBSD components asmon and ascpu; local users can escalate to root via a configuration file. The connected documents confirm the vulnerable elements but do not provide version-specific details, exploit vectors, or explicit remediation steps. The impact is local privilege e...

CVE-2000-0160

The vulnerability CVE-2000-0160 affects the Microsoft Active Setup ActiveX component used by Internet Explorer 4.x–5.x. A remote attacker can install software components without user prompts by spoofing the software manufacturer's identity as Microsoft. Exploitation details or in-the-wild status ...

CVE-2000-0153

The CVE-2000-0153 entry concerns FrontPage Personal Web Server (PWS). It describes a path traversal vulnerability (dot-dot attack) that allows remote attackers to read files, resulting in partial confidentiality impact. The available connected records confirm the affected product and the basic im...

CVE-2000-0167

IIS Inetinfo.exe is affected; local users can trigger a denial of service by creating a mail file with an unusually long name and a .txt.eml extension in the pickup directory. The CVSS data indicates a local attack vector, no authentication, and a partial availability impact (base score 2.1). The...