CVE-2000-0414

The CVE-2000-0414 entry describes a local privilege escalation in HP-UX 11.X/10.X caused by a flaw in the shutdown command’s handling of input variables. A local attacker could exploit malformed input to gain elevated privileges. The available sources confirm the affected component (shutdown comm...

CVE-2000-0418

Vulnerability (CVE-2000-0418) affects Cayman gateways, including the Cayman 3220-H DSL router, due to handling of oversized ICMP echo (ping) requests. Remote attackers can cause a denial of service by sending oversized ping packets. Exploitation details in the connected documents indicate affecte...

CVE-2000-0439

Vulnerability: Internet Explorer 4.0/5.0. Issue: malicious site can obtain cookies from another domain by embedding that domain name with escaped characters in a URL (Unauthorized Cookie Access). Root cause: cross-domain cookie access via crafted URL. Impact: potential leakage of cookies across d...

CVE-2000-0452

The CVE-2000-0452 entry pertained to the Lotus Domino Server 5.0.1 ESMTP service. A buffer overflow can be triggered by a long MAIL FROM command, potentially causing a denial of service. Some connected sources additionally note this vulnerability could allow execution of arbitrary code on the rem...

CVE-2000-0465

Affected software: Internet Explorer 4.x and 5.x. Vulnerability: Frame Domain Verification — IE does not properly verify the domain of a frame within a browser window. Root cause/summary: Inadequate domain verification enables a remote attacker to access client files via the frame. Impact: Confid...

CVE-2000-0492

CVE-2000-0492 concerns PassWD 1.2, where passwords are stored with weak, trivially decodable encryption. The vulnerability occurs because the password file can be read and the stored passwords decrypted due to the weak encoding. Affected component: PassWD 1.2 password storage. Root cause: use of ...

CVE-2000-0509

CVE-2000-0509 affects Sambar Server 4.3, specifically the finger and whois demonstration scripts. A buffer overflow triggered by a long hostname allows remote attackers to execute arbitrary commands. The connected documents do not provide a patch/version fix; no exploitation details are listed. T...

CVE-2000-0524

Technical details about CVE-2000-0524 (affected products, root cause, and remediation) are not publicly available in the provided documents. Monitor for updates.

CVE-2000-0546

The CVE-2000-0546 entry concerns the Kerberos 4 KDC. The vulnerability is a buffer overflow in the KDC’s set_tgtkey function triggered by the lastrealm variable, leading to remote denial of service. Affected component: Kerberos 4 KDC (set_tgtkey). Impact is described as denial of service via netw...

CVE-2000-0554

Ceilidh (the affected product) is vulnerable to a remote path disclosure vulnerability where an attacker can obtain the real filesystem path of the Ceilidh directory via the translated_path hidden form field. The CVE description and linked records indicate the vulnerability is exploitable over th...

CVE-2000-0337

Buffer overflow in Xsun X server in Solaris 7 allows local users to gain root privileges via a long -dev parameter...

CVE-2000-0455

CVE-2000-0455: A buffer overflow in the xlockmore xlock program (versions 4.16 and earlier) allows local users to read sensitive data from memory via a long -mode option. Affected component is xlockmore; root cause is a memory safety overrun in handling the -mode argument. Impact documented as pa...

CVE-2000-0460

CVE-2000-0460 affects KDE kdesud on Linux and is a local privilege-escalation vulnerability caused by a buffer overflow triggered by a long DISPLAY environment variable. The NVD metrics indicate Local attack vector, Low attack complexity, no authentication required, and a base score of 7.2 (HIGH)...

CVE-2000-0381

CVE-2000-0381 affects the Gossamer Threads DBMan DBMan CGI script (db.cgi). The vulnerability arises when a non-existent database is referenced via the db parameter, allowing remote attackers to view environment variables and setup information (server information leakage). The OpenVAS NASL entrie...

CVE-2000-0092

The CVE-2000-0092 entry concerns the BSD make program, where local users can modify files via a symlink attack when the -j option is used. Affected component: make in BSD systems. Root cause: symlink race during parallel builds allows write access to targeted files. Impact: local unauthorized mod...

CVE-2000-0045

CVE-2000-0045 affects MySQL: local users can modify passwords for arbitrary MySQL users via the GRANT privilege. The vulnerability is documented in CVE/NVD with a base score of 6.4 (MEDIUM). Connected documents confirm the issue but do not provide explicit affected versions or remediation details...

CVE-2000-0491

Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to execute arbitrary commands or cause a denial of service via a long FORWARDQUERY request...

CVE-2000-0416

NTMail 5.x allows network users to bypass the NTMail proxy restrictions by redirecting their requests to NTMail's web configuration server...

CVE-2000-0195

Corel Linux setxconf is vulnerable when invoked with the -T parameter, which causes the user’s .xserverrc to be executed and enables local privilege escalation to root. This is a local, unauthenticated issue affecting Corel Linux’s setxconf utility; the provided documents do not specify affected ...

CVE-2000-0503

The CVE-2000-0503 entry concerns the IFRAME within the WebBrowser control of Internet Explorer 5.01. The issue allows a remote attacker to violate the cross-frame security policy via the NavigateComplete2 event. The description and connected records indicate the vulnerability is tied to the WebBr...