CVE-2000-0105

Outlook Express 5.01 and Internet Explorer 5.01 allow remote attackers to view a user's email messages via a script that accesses a variable that references subsequent email messages that are read by the client...

CVE-2000-0144

Axis 700 Network Scanner does not properly restrict access to administrator URLs, which allows users to bypass the password protection via a .. dot dot attack...

CVE-2000-0069

The recover program in Solstice Backup allows local users to restore sensitive files...

CVE-2000-0035

resend command in Majordomo allows local users to gain privileges via shell metacharacters...

CVE-2000-0079

The CVE-2000-0079 entry concerns CERN httpd's path disclosure vulnerability. Public sources in connected documents indicate that remote attackers could determine the real pathnames of certain commands by requesting a nonexistent URL, with additional details from Nessus showing an information-disc...

CVE-2000-0055

CVE-2000-0055 describes a buffer overflow in the Solaris chkperm command that allows a local user to gain root privileges by supplying a long -n option. The vulnerability is local in scope with a high impact (confidentiality, integrity, and availability all listed as complete) and a CVSS base sco...

CVE-2000-0068

The CVE-2000-0068 entry concerns the daynad component of Intel InBusiness E-mail Station. The issue arises because the daynad program does not require authentication, enabling remote attackers to modify configuration, delete files, or read mail. The provided sources state the vulnerability and im...

CVE-2000-0086

The CVE-2000-0086 entry concerns Netopia Timbuktu Pro, where credentials (user IDs and passwords) are transmitted in cleartext, enabling eavesdroppers to obtain them via network sniffing. The available documents confirm the affected software and the root cause (unencrypted credential handling), w...

CVE-2000-0067

The CVE refers to CyberCash Merchant Connection Kit (MCK). Affected component: MCK. Vulnerability: local users can modify files via a symlink attack (symlink race condition) as described in CVE-2000-0067. The PT-2000-1059 entry confirms the issue is related to local access and notes that affected...

CVE-2000-0082

Technical details (affected product/version, root cause, and fixes) are not publicly provided in the supplied documents; monitor for updates.

CVE-2000-0058

CVE-2000-0058 affects HotSync Manager (Handsᴘʀᴛ Visor ecosystem). The OpenVAS NASL entry describes a Denial of Service: sending garbage to TCP port 14238 can crash HotSync Manager. CVSS 2.0 base score 5.0 (Network, low complexity, no authentication). The NVD/CVE records cite an authentication iss...

CVE-2000-0035

CVE-2000-0035 : The vulnerability involves Majordomo’s resend command that allows local users to gain privileges via shell metacharacters. This is a local-privilege issue with the root cause being unsafely handled shell metacharacters in the resend logic. The NVD entry lists a CVSSv2 base score o...

CVE-2000-0054

The CVE-2000-0054 entry describes a directory traversal vulnerability in the CGI script search.cgi of the SolutionScripts Home Free package. An unauthenticated remote attacker can use .. sequences in the letter parameter to read arbitrary files from the affected web server, subject to the server ...

CVE-2000-0047

Buffer overflow in Yahoo Pager/Messenger client allows remote attackers to cause a denial of service via a long URL within a message...

CVE-2000-0061

Internet Explorer 5 does not modify the security zone for a document that is being loaded into a window until after the document has been loaded, which could allow remote attackers to execute Javascript in a different security context while the document is loading...

CVE-2000-0038

CVE-2000-0038 concerns glFtpD (glftpd) software where a default glftpd user account exists with a default password and a UID of 0. The vulnerability is tied to this account’s privileged UID, enabling potential unauthorized access or privilege elevation. The PT-1999-1846 entry notes affected versi...

CVE-2000-0049

The CVE-2000-0049 vulnerability is a buffer overflow in the Winamp client triggered by a long entry in a .pls file, enabling remote command execution. Documents identify the affected software as Winamp and describe the vulnerability type as a buffer overflow in processing crafted playlist entries...

CVE-2000-0019

CVE-2000-0019 affects the IMail POP3 daemon. The vulnerability arises from weak encryption, enabling local users to read files with partial confidentiality impact. The provided sources indicate affected versions are not specified and there is no information about a fix in the documents supplied.

CVE-2000-0047

Yahoo Messenger/Pager DoS vulnerability (CVE-2000-0047): buffer overflow in the Yahoo Messenger/Pager client allows a remote attacker to cause denial of service by processing a long URL within a message. Affected component: Yahoo Messenger/Pager client. CVSSv2 base score: 5.0 (Network, Low access...

CVE-2000-0085

The set of documents identifies CVE-2000-0085 as a vulnerability in Hotmail where JavaScript could bypass filters in a user’s mailbox, enabling remote code execution via the LOWSRC or DYNRC parameters in the IMG tag. The issue arises from improper filtering of JavaScript in messages, suggesting t...