CVE-2000-0150

Check Point Firewall-1 allows remote attackers to bypass port access restrictions on an FTP server by forcing it to send malicious packets that Firewall-1 misinterprets as a valid 227 response to a client's PASV attempt...

CVE-2000-0142

The authentication protocol in Timbuktu Pro 2.0b650 allows remote attackers to cause a denial of service via connections to port 407 and 1417...

CVE-2000-0140

Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service via a large number of connections...

Novell BorderManager Port 2000 Telnet DoS

The port 2000 is open, and Novell BorderManager might be listening on it. There is a denial of service attack that allows an intruder to make a Novell BorderManager 3.5 slowly die. If you see an error message on this computer telling you 'Short Term Memory Allocator is out of Memory' then you are...

CVE-2000-0136

The CVE-2000-0136 entry concerns the Cart32 shopping cart application, where remote attackers can modify sensitive purchase information through hidden form fields. As per the linked documents, this affects Cart32 and is characterized by a network-remote access vector with low attack complexity an...

CVE-2000-0093

The CVE-2000-0093 entry concerns Red Hat installations that use DES-encrypted passwords via crypt() for the initial password instead of MD5. Affected component is the initial password handling in Red Hat setups; root cause is the use of DES crypt() rather than a stronger hash. Documents explicitl...

CVE-2000-0104

The Shoptron shopping cart application allows remote users to modify sensitive purchase information via hidden form fields...

CVE-2000-0103

The CVE-2000-0103 entry concerns the SmartCart shopping cart application, where remote attackers can modify sensitive purchase information through hidden form fields. The core issue is the manipulation of hidden fields used in purchase workflows, enabling partial breaches of confidentiality and i...

CVE-2000-0135

CVE-2000-0135 affects the @Retail shopping cart application. NVD notes remote attackers can modify sensitive purchase information via hidden form fields, with a CVSS v2 base score of 7.5 (NETWORK, LOW complexity, NONE auth, partial impact across confidentiality, integrity, and availability). Conn...

CVE-2000-0110

CVE-2000-0110 affects the WebSiteTool shopping cart application, where remote attackers can modify sensitive purchase information by manipulating hidden form fields in the shopping cart. The PT-2000-1098 entry corroborates this description but does not specify affected versions or a fix. No explo...

CVE-2000-0102

CVE-2000-0102 concerns the SalesCart shopping cart where remote attackers can modify sensitive purchase information through hidden form fields. The issue affects SalesCart as described in multiple records; the PT-2000-1090 entry confirms the vulnerability exists in SalesCart with no publicly docu...

CVE-2000-0125

CVE-2000-0125 concerns wwwthreads where numeric data and table names passed to SQL queries are not properly sanitized. The underlying cause is improper input handling in SQL construction, enabling an unauthenticated, remote attacker to gain privileges on the wwwthreads forums. The available recor...

CVE-2000-0115

CVE-2000-0115 concerns Microsoft IIS. The vulnerability arises from a denial-of-service condition caused by invalid regular expressions in a Visual Basic script embedded in an ASP page. The root cause is malformed regex handling in VBScript within the ASP context, which can exhaust resources and ...

CVE-2000-0132

Microsoft Java Virtual Machine contains a flaw in getSystemResourceAsStream that allows remote attackers to read files. The CVE-2000-0132 entry is confirmed in the NVD, with a Network attack vector, high complexity, no authentication, and partial confidentiality impact (base score 2.6/10). The pr...

CVE-2000-0132

Microsoft Java Virtual Machine allows remote attackers to read files via the getSystemResourceAsStream function...

CVE-2000-0134

The Check It Out shopping cart application contains a vulnerability that allows remote attackers to modify sensitive purchase information via hidden form fields. Described across CVE-2000-0134 sources, this flaw enables unauthenticated remote access with partial confidentiality and integrity impa...

CVE-2000-0119

The CVE-2000-0119 entry describes a vulnerability in McAfee VirusScan and Norton Anti-Virus where default configurations do not scan files in the Windows Recycle Bin’s RECYCLED folder. This allows an attacker to store malicious code undetected within that folder. The root cause is the failing to ...

CVE-2000-0137

The CartIt shopping cart application allows remote users to modify sensitive purchase information via hidden form fields...

CVE-2000-0102

The SalesCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields...

CVE-2000-0104

CVE-2000-0104 concerns the Shoptron shopping cart application. The connected PT-2000-1092 entry confirms that remote attackers could modify sensitive purchase information via hidden form fields in the Shoptron cart. The PT entry notes that affected versions are not specified and provides no remed...