CVE-2000-0623

CVE-2000-0623 affects WebSitePro (WebSitePro/WebSite Professional) 2.4 and earlier. A remote attacker can cause a buffer overflow via a long HTTP GET request or Referrer header, potentially allowing arbitrary code execution. Public sources in connected documents identify this as a remote overflow...

CVE-2000-0625

CVE-2000-0625 refers to NetZero 3.0 and earlier, which stores login credentials using weak encryption. The underlying issue is insecure storage that allows a local user to decrypt the password. No remediation details are provided in the sources; the impact is partial confidentiality and integrity...

CVE-2000-0645

CVE-2000-0645 affects WFTPD and WFTPD Pro 2.41. The vulnerability allows remote attackers to cause a denial of service by issuing RESTART (REST) and writing beyond the end of a file or to a non-existent file via STORE UNIQUE (STOU), STORE (STOR), or APPEND (APPE). The issue is triggered by crafti...

CVE-2000-0656

CVE-2000-0656 : Affected product is AnalogX Proxy Server (version 4.04 and earlier). The vulnerability is a buffer overflow caused by a long USER command in the FTP protocol, enabling remote attackers to cause a denial of service. The connected documents confirm the impact as denial of service; n...

CVE-2000-0648

Vulnerability : WFTPD and WFTPD Pro 2.41 suffer a denial-of-service by issuing RNTO before RNFR, causing local DoS. Affecting components : FTP server software WFTPD/WFTPD Pro 2.41; affected command sequence involves RNTO and RNFR. Root cause / impact : Misordered RNTO/RNFR handling can crash the ...

CVE-2000-0646

WFTPD and WFTPD Pro 2.41 are vulnerable to information disclosure: a remote attacker can obtain the real file pathname by issuing a STATUS (STAT) command during a transfer, exposing filesystem paths. The provided documents do not specify an official fix or remediation, nor exploitation status bey...

CVE-2000-0667

Vulnerability in gpm in Caldera Linux allows local users to delete arbitrary files or conduct a denial of service...

CVE-2000-0647

CVE-2000-0647 affects WFTPD and WFTPD Pro 2.41. A remote attacker can trigger a denial of service by issuing an MLST command before logging in, potentially impacting availability. No remediation details are provided in the supplied documents.

CVE-2000-0645

WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by using the RESTART REST command and writing beyond the end of a file, or writing to a file that does not exist, via commands such as STORE UNIQUE STOU, STORE STOR, or APPEND APPE...

CVE-2000-0656

Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long USER command in the FTP protocol...

CVE-2000-0658

Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long USER command in the POP3 protocol...

CVE-2000-0649

CVE-2000-0649 describes an HTTP internal IP disclosure in IIS 4.0: an attacker can obtain the server’s private IP by requesting a page protected with Basic Authentication (no realm) via HTTP/1.0. Connected documents (Metasploit IIS_INTERNAL_IP module, Nessus/Nessus-like plugin, OpenVAS NASL) corr...

CVE-2000-0658

CVE-2000-0658 concerns AnalogX Proxy Server (versions up to 4.04) where a buffer overflow in the POP3 USER command handling can cause denial of service. The affected component is the server’s POP3 USER command path; root cause is a buffer overflow when processing a long USER input. Impact as stat...

CVE-2000-0648

WFTPD and WFTPD Pro 2.41 allows local users to cause a denial of service by executing the RENAME TO RNTO command before a RENAME FROM RNFR command...

CVE-2000-0653

Technical details (affected products, versions, root cause, or exploit specifics) are not publicly provided in the supplied documents. Monitor for updates.

CVE-2000-0626

Alibaba Web Server 2.0 is affected by a buffer overflow in HTTP request handling (notably via long GET/POST requests), enabling remote attackers to cause denial of service. The NASL entry additionally indicates potential arbitrary code execution through crafted requests, suggesting a broader impa...

CVE-2000-0659

The CVE-2000-0659 entry describes a buffer overflow in AnalogX proxy server (versions 4.04 and earlier) that allows remote attackers to cause a denial of service via a long user ID in a SOCKS4 CONNECT request. Affected software is the AnalogX proxy server; the root cause is a buffer overflow trig...

CVE-2000-0657

The vulnerability CVE-2000-0657 affects AnalogX Proxy Server versions 4.04 and earlier. It is a buffer overflow triggered by a long HELO command in SMTP, leading to a remote-denial of service. The provided documents do not include a remediation or a confirmed exploit status. No further technical ...

Security Bulletin (MS00-053)

Microsoft Security Bulletin MS00-053 - -------------------------------------- Patch Available for "Service Control Manager Named Pipe Impersonation" Vulnerability Originally posted: August 02, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsof...

Уязвимость в services.exe Windows 2000

Локальный пользователь может создать приложение, которое "перехватит" именованный канал регистрируемый сервисом, таком образом получив возможность оперировать в контексте операционной системы...