8750 matches found
CVE-2000-0574
Affected software: OpenBSD ftpd, NetBSD ftpd, ProFTPd, and Opieftpd. The issue is that untrusted format strings are not properly cleansed in setproctitle, allowing remote attackers to cause a denial of service or execute arbitrary commands. The connected Nessus document notes an attack scenario w...
CVE-2000-0578
SGI MIPSPro compilers (C, C++, F77, F90) populate /tmp with predictable temporary file names. This allows a local attacker to modify contents of those files while a build is performed by another user, as described in CVE-2000-0578. The vulnerability stems from how temporary files are created duri...
CVE-2000-0608
Technical details about CVE-2000-0608 are not publicly available in the provided documents. Monitor for updates.
CVE-2000-0589
SawMill 5.0.21 is affected by a weakness in how it stores passwords, enabling an attacker to decrypt the administrative password and modify the SawMill configuration. The vulnerability stems from weak encryption/hash usage, facilitating information disclosure and potential configuration tampering...
CVE-2000-0592
The CVE-2000-0592 entry documents a buffer overflow in the POP3 service of WinProxy 2.0 and 2.0.1. The vulnerability arises when processing certain POP3 commands (USER, PASS, LIST, RETR, DELE), enabling remote attackers to potentially execute arbitrary commands. Affected software: WinProxy POP3 s...
CVE-2000-0607
Technical details about CVE-2000-0607 are not provided in the supplied connected documents. The description in the Initial document notes a buffer overflow in KON on Linux, but no affected versions, impact specifics, or remediation are disclosed here. Monitor for updates.
CVE-2000-0580
Windows 2000 Server allows remote attackers to cause a denial of service by sending a continuous stream of binary zeros to various TCP and UDP ports, which significantly increases the CPU utilization...
CVE-2000-0578
SGI MIPSPro compilers C, C++, F77 and F90 generate temporary files in /tmp with predictable file names, which could allow local users to insert malicious contents into these files as they are being compiled by another user...
CVE-2000-0580
CVE-2000-0580 affects Windows 2000 Server. It enables remote denial of service by sending a continuous stream of binary zeros to various TCP/UDP ports, causing significant CPU utilization. The provided documents do not specify a patch, workaround, affected versions beyond Windows 2000 Server, or ...
CVE-2000-0572
The Razor configuration management tool uses weak encryption for its password file, which allows local users to gain privileges...
CVE-2000-0606
Buffer overflow in kon program in Kanji on Console KON package on Linux may allow local users to gain root privileges via a long -StartupMessage parameter...
CVE-2000-0618
CVE-2000-0618 affects xconq and cconq game programs on Red Hat Linux. A buffer overflow is triggered by a long DISPLAY environment variable, enabling local users to gain additional privileges. The entry lists a CVSS v2 base score of 4.6 (Medium) with local access, low attack complexity, and no au...
CVE-2000-0605
Summary: CVE-2000-0605 affects Blackboard CourseInfo 4.0. The vulnerability is that local and SQL administrator usernames/passwords are stored in cleartext in a registry key whose ACL allows other users to access the passwords. This leads to potential confidentiality exposure of admin credentials...
CVE-2000-0580: Undefined Security Weakness
Windows 2000 Server allows remote attackers to cause a denial of service by sending a continuous stream of binary zeros to various TCP and UDP ports, which significantly increases the CPU utilization...
DoS in Gamsoft TelSrv telnet server for MS Windows 95/98/NT/2k.
Application: GAMSoft's TelSrv 1.4/1.5 Problem Type: Denial of Service Author: [email protected] Platforms: Windows 95/98/NT/2k Vendor Status: Contacted. Vendor Website: http://www.gamsoft.com Product Description ------------------- TelSrv is superior Telnet server. It provides you with th...
CVE-2000-0567
Buffer overflow in Microsoft Outlook and Outlook Express allows remote attackers to execute arbitrary commands via a long Date field in an email header, aka the "Malformed E-mail Header" vulnerability...
CVE-2000-0625
NetZero 3.0 and earlier uses weak encryption for storing a user's login information, which allows a local user to decrypt the password...
CVE-2000-0627
BlackBoard CourseInfo 4.0 does not properly authenticate users, which allows local users to modify CourseInfo database information and gain privileges by directly calling the supporting CGI programs such as userupdatepasswd.pl and userupdateadmin.pl...