CVE-2000-0158

CVE-2000-0158 describes a buffer overflow in the MMDF server that allows remote attackers to gain privileges via a long MAIL FROM command to the SMTP daemon. The affected component is the MMDF server’s SMTP handling; the root cause is a buffer overflow vulnerability. No exploitation details or re...

CVE-2000-0163

asmon and ascpu in FreeBSD allow local users to gain root privileges via a configuration file...

CVE-2000-0154

The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack...

CVE-2000-0211

The Windows Media server allows remote attackers to cause a denial of service via a series of client handshake packets that are sent in an improper sequence, aka the "Misordered Windows Media Services Handshake" vulnerability...

CVE-2000-0160

The Microsoft Active Setup ActiveX component in Internet Explorer 4.x and 5.x allows a remote attacker to install software components without prompting the user by stating that the software's manufacturer is Microsoft...

CVE-2000-0210

The lit program in Sun Flex License Manager FlexLM follows symlinks, which allows local users to modify arbitrary files...

CVE-2000-0161

Sample web sites on Microsoft Site Server 3.0 Commerce Edition do not validate an identification number, which allows remote attackers to execute SQL commands...

win2k.install.txt

Hi ! During the installation process of Windows 2000 professionnal anyone can connect to the ADMIN$ share as ADMINISTRATOR whithout any password. Verification : % ./smbclient \\WINDOZE\ADMIN$ -I xxx.yyy.zzz.ttt -U 'administrator' -d 0 -N Unable to open configuration file...

CVE-2000-0159

HP Ignite-UX does not save /etc/passwd when it creates an image of a trusted system, which can set the password field to a blank and allow an attacker to gain privileges...

CVE-2000-0094

procfs in BSD systems allows local users to gain root privileges by modifying the /proc/pid/mem interface via a modified file descriptor for stderr...

CVE-2000-0151

GNU make follows symlinks when it reads a Makefile from stdin, which allows other local users to execute commands...

CVE-2000-0143

Technical details for CVE-2000-0143 are not provided in the connected documents. The initial description notes local TCP redirection via sshd, but no vendor/versions/impact or fixes are specified beyond that. Monitor for updates.

CVE-2000-0154

The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack...

CVE-2000-0151

CVE-2000-0151 : GNU make reads a Makefile from stdin and follows symlinks, enabling other local users to execute commands. This is a local impact issue with high complexity to exploit; CVSS data shows local access, complete confidentiality/integrity/availability impact. The provided documents do ...

CVE-2000-0142

Summary: Timbuktu Pro 2.0b650 contains a vulnerability in its authentication protocol that lets remote attackers cause a denial of service by connecting to ports 407 and 1417. What’s affected: Timbuktu Pro, version 2.0b650; vulnerability relates to the authentication mechanism and affects availab...

CVE-2000-0147

The CVE-2000-0147 issue affects snmpd on SCO OpenServer, where the SNMP community string is writable by default. This enables local attackers to modify the host’s configuration. Connected sources corroborate the default-write vulnerability but do not provide a patch or explicit remediation details.

CVE-2000-0167

IIS Inetinfo.exe allows local users to cause a denial of service by creating a mail file with a long name and a .txt.eml extension in the pickup directory...

CVE-2000-0224

ARCserve agent in SCO UnixWare 7.x allows local attackers to gain root privileges via a symlink attack...

CVE-2000-0222

The installation for Windows 2000 does not activate the Administrator password until the system has rebooted, which allows remote attackers to connect to the ADMIN$ share without a password until the reboot occurs...

CVE-2000-0138

CVE-2000-0138 is associated with systems infected by DDoS control tools (master/agent/zombie) such as Trinoo, TFN/TFN2K, stacheldraht, mstream, and shaft. The Connected documents show multiple Nessus plugin detections (e.g., Trinity v3, mstream, Shaft, Trin00) reporting a compromised host running...