CVE-2000-0084

Summary of CVE-2000-0084 (CuteFTP) : The vulnerability arises from CuteFTP storing password information in its tree.dat file using weak encryption. This is evidenced across multiple sources in the connected documents, which consistently describe weak encryption as the root cause. The available de...

CVE-2000-0079

The W3C CERN httpd HTTP server allows remote attackers to determine the real pathnames of some commands via a request for a nonexistent URL...

CVE-2000-0074

The vulnerability CVE-2000-0074 affects PowerScripts PlusMail CGI. The PlusMail CGI allows remote command execution via a password file with improper permissions on the server side. Affected component: PlusMail CGI in PowerScripts. Impact per sources: potential remote command execution with netwo...

CVE-2000-0077

The CVE-2000-0077 entry concerns the October 1998 HP-UX aserver program. It describes a local-privilege escalation where an alternate PATH is used to locate ps and grep, enabling a local attacker to gain privileges. Root cause: insecure PATH handling in the aserver’s command lookup. Impact per th...

CVE-2000-0128

The Finger Server 0.82 allows remote attackers to execute commands via shell metacharacters...

CVE-2000-0059

CVE-2000-0059 affects PHP3 when safe_mode is enabled. The vulnerability arises because shell metacharacters are not properly filtered from commands executed via popen , potentially allowing remote attackers to execute arbitrary commands. The provided documents describe the issue but do not specif...

CVE-2000-0016

The vulnerability CVE-2000-0016 affects Internet Anywhere POP3 Mail Server. The issue is a buffer overflow triggered by a long username, allowing remote attackers to cause a denial of service or execute commands. No explicit remediation or patched version is provided in the supplied documents. Ex...

CVE-1999-0606

An incorrect configuration of the EZMall 2000 shopping cart CGI program "mall2000.cgi" could disclose private information...

CVE-2000-0066

WebSite Pro is affected by CVE-2000-0066: remote attackers can reveal the real pathname of web directories through a malformed URL request, causing information disclosure (partial confidentiality impact). The vulnerability is documented in multiple sources (NVD/CVE listings and a Nessus plugin). ...

CVE-2000-0017

The CVE-2000-0017 entry describes a buffer overflow in the Linux linuxconf package that allows remote attackers to gain root privileges via a long parameter. This is supported by the NVD entry and corroborated by OpenVAS/PT-Security records referencing linuxconf and the same issue. The available ...

CVE-2000-0008

FTPPro allows local users to read sensitive information, which is stored in plain text...

CVE-2000-0021

The CVE describes an information-disclosure issue in IBM/Lotus Domino HTTP Server: an attacker can remotely determine the real path of the server by requesting a non-existent script under /cgi-bin. Affected component is the Domino HTTP server and the vulnerability stems from how it handles reques...

CVE-2000-0008

The CVE-2000-0008 issue concerns FTPPro, where local users can read sensitive data stored in plain text. Connected sources (PT-1999-1817) name FTPPro and describe the vulnerability as allowing local access to plaintext information, but do not specify affected versions or a repair/fix. Other conne...

CVE-2000-0071

Microsoft IIS 4.0 is affected by CVE-2000-0071 via an information-disclosure path in the IDA/IDQ handling. A remote attacker can request non-existent files with .ida or .idq extensions to obtain the real document-root pathname, potentially aiding further targeted attacks. The issue is evidenced i...

CVE-2000-0059

PHP3 with safemode enabled does not properly filter shell metacharacters from commands that are executed by popen, which could allow remote attackers to execute commands...

CVE-2000-0067

CyberCash Merchant Connection Kit MCK allows local users to modify files via a symlink attack...

CVE-2000-0028

Internet Explorer 5.0 and 5.01 allows remote attackers to bypass the cross frame security policy and read files via the external.NavigateAndFind function...

CVE-2000-0082

WebTV email client allows remote attackers to force the client to send email without the user's knowledge via HTML...

CVE-2000-0069

CVE-2000-0069 concerns the recover program in Solstice Backup, where local users can restore sensitive files. Documents indicate affected status and that the vulnerability allows local access to sensitive data, but do not specify affected versions or any available fix. The PT-2000-1060 entry note...

CVE-2000-0005

HP-UX aserver program contains a local privilege-escalation vulnerability via a symlink attack. Affected component: HP-UX aserver. Root cause: symlink manipulation allowing local users to gain privileges (CVE-2000-0005). Impact: complete confidentiality, integrity, and availability for the attack...