CVE-2000-0123

CVE-2000-0123 describes a vulnerability in the Filemaker shopping cart application where remote attackers can alter sensitive purchase information by manipulating hidden form fields. The available sources confirm the issue exists in the shopping cart component shipped with Filemaker, enabling inf...

CVE-2000-0122

CVE-2000-0122 affects FrontPage Server Extensions. A remote attacker can determine the physical path of a virtual directory by issuing a GET to htimage.exe, leading to information disclosure about server layout. The provided records do not specify affected versions, exact vulnerable component det...

CVE-2000-0136

The Cart32 shopping cart application allows remote users to modify sensitive purchase information via hidden form fields...

CVE-2000-0118

The CVE-2000-0118 entry concerns the Red Hat Linux su program: when the su process is killed before its timeout, failed password guesses aren’t logged, enabling local brute-force password guessing. The affected component is the su utility; the root cause is failure to log failed attempts due to p...

CVE-2000-0147

snmpd in SCO OpenServer has an SNMP community string that is writable by default, which allows local attackers to modify the host's configuration...

CVE-2000-0108

CVE-2000-0108 concerns the Intellivend shopping cart application, where remote attackers can modify sensitive purchase information through hidden form fields in the application. The issue affects the Intellivend shopping cart software (specific affected versions are not provided in the connected ...

CVE-2000-0124

CVE-2000-0124 affects surfCONTROL SuperScout. The vulnerability arises because it does not properly assign a category to web sites that end with a dot, which could allow bypassing web access restrictions. The NVD entry lists a low base score (CVSS2 2.1) with local attack vector, unauthenticated a...

CVE-2000-0129

The vulnerability CVE-2000-0129 affects the Serv-U FTP server. A buffer overflow in SHGetPathFromIDList can be triggered by a LIST command on a malformed .lnk file, leading to a denial of service. Exploitation details are not provided in the documents. PT-2000-1115 notes affected versions are not...

CVE-2000-0114

Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the /vtibin/ virtual directory...

CVE-2000-0093

An installation of Red Hat uses DES password encryption with crypt for the initial password, instead of md5...

CVE-2000-0148

MySQL 3.22 allows remote attackers to bypass password authentication and access a database via a short check string...

CVE-2000-0105

Outlook Express 5.01 and Internet Explorer 5.01 allow remote attackers to view a user's email messages via a script that accesses a variable that references subsequent email messages that are read by the client...

CVE-2000-0114

CVE-2000-0114 affects FrontPage Server Extensions. It enables unauthenticated remote disclosure of the anonymous account name via an RPC POST to shtml.dll in the /_vti_bin/ virtual directory. The issue stems from information disclosure in FrontPage Server Extensions; no exploitation details are p...

CVE-2000-0137

The CartIt shopping cart application is affected by a vulnerability where remote attackers can modify sensitive purchase information through hidden form fields. The affected component appears to be the client-side forms used to submit order data, with the underlying issue not explicitly detailed ...

CVE-2000-0106

The CVE-2000-0106 entry concerns the EasyCart shopping cart application, where the vulnerability stems from remote modification of sensitive purchase information through hidden form fields in the application. The PT-2000-1094 entry confirms EasyCart as affected, but does not specify affected vers...

CVE-2000-0101

The CVE-2000-0101 entry concerns the Make-a-Store OrderPage shopping cart, where remote users can modify sensitive purchase information via hidden form fields in the application. Connected PT-2000-1089 confirms the vulnerable software as Make-a-Store OrderPage (affected versions not specified) an...

CVE-2000-0096

Qpopper 3.0 beta is vulnerable to a buffer overflow via a long LIST command, enabling local privilege gain. This CVE (CVE-2000-0096) affects Qpopper and is detailed in multiple sources, including CVE records and the Nessus 10197 plugin for Qpopper

CVE-2000-0109

The CVE-2000-0109 entry corresponds to Standard & Poor’s ComStock MultiCSP Client Site Processor (MCSP) systems that ship with several accounts with no passwords or easily guessable defaults. Connected sources confirm this weakness on the MultiCSP implementation; Nessus notes default/blank passwo...

CVE-2000-0123

The shopping cart application provided with Filemaker allows remote users to modify sensitive purchase information via hidden form fields...

CVE-2000-0126

CVE-2000-0126 affects Microsoft IIS 3 and 4 via the idq.dll component. The vulnerability enables remote attackers to read arbitrary files on the target system by exploiting a dot-dot ('..') traversal in the IDQ scripts, specifically through the query.idq parameter. The root cause is a traversal f...