CVE-2000-0311

The Windows 2000 domain controller allows a malicious user to modify Active Directory information by modifying an unprotected attribute, aka the "Mixed Object Access" vulnerability...

CVE-2000-0563

The URLConnection function in MacOS Runtime Java MRJ 2.1 and earlier and the Microsoft virtual machine VM for MacOS allows a malicious web site operator to connect to arbitrary hosts using a HTTP redirection, in violation of the Java security model...

CVE-2000-0455

Buffer overflow in xlockmore xlock program version 4.16 and earlier allows local users to read sensitive data from memory via a long -mode option...

CVE-2000-0547

Technical details (affected software, root cause, patch) are not provided in the supplied documents; monitor for updates.

CVE-2000-0463

BeOS 5.0 is affected by CVE-2000-0463. The vulnerability allows remote denial of service via fragmented TCP packets, as described in the CVE entry. The connected documents corroborate the BeOS 5.0 DoS impact but do not provide additional technical details, affected subcomponents, exploit vectors,...

CVE-2000-0411

CVE-2000-0411 concerns Matt Wright’s FormMail CGI script. The vulnerability allows remote attackers to obtain environmental variables via the env_report parameter, potentially exposing sensitive system information. Connected PT-2000-1353 notes affected versions are not specified and provides no f...

CVE-2000-0175

The CVE-2000-0175 entry describes a buffer overflow in the StarOffice StarScheduler web server that allows a remote attacker to gain root access by sending a crafted, long GET request. Affected component is the web server component of StarOffice's StarScheduler; the vulnerability is triggered by ...

CVE-2000-0407

The provided documents identify CVE-2000-0407 as a local-privilege escalation vulnerability in the Solaris netpr service caused by a buffer overflow via an excessively long -p option. The root cause is a buffer overflow in the netpr program. The materials do not specify affected product versions,...

CVE-2000-0352

Technical details about CVE-2000-0352 are not provided in the connected documents. The initial entry lists the Pine vulnerability but no additional specifics. Monitor for updates.

CVE-2000-0562

BlackIce Defender 2.1 and earlier, and BlackIce Pro 2.0.23 and earlier, fail to block Back Orifice traffic when the security setting is Nervous or lower. The CVE-2000-0562 entry documents this condition for these products, indicating a partial confidentiality, integrity, and availability impact w...

CVE-2000-0554

Ceilidh allows remote attackers to obtain the real path of the Ceilidh directory via the translatedpath hidden form field...

CVE-2000-0417

The HTTP administration interface to the Cayman 3220-H DSL router allows remote attackers to cause a denial of service via a long username or password...

CVE-2000-0363

Linux cdwtools 093 and earlier allows local users to gain root privileges via the /tmp directory...

CVE-2000-0387

CVE-2000-0387 affects the FreeBSD ports golddig makelev program, where local users can overwrite arbitrary files. The vulnerability is a local issue with partial integrity impact and a low base score (2.1). The available documents do not provide exploitation details, affected versions beyond the ...

CVE-2000-0473

Buffer overflow in AnalogX SimpleServer 1.05 allows a remote attacker to cause a denial of service via a long GET request for a program in the cgi-bin directory...

CVE-2000-0011

Technical details about CVE-2000-0011 are not publicly available in the provided connected documents. Monitor for updates from official advisories to obtain affected versions, impact, and remediation information.

CVE-2000-0473

CVE-2000-0473 corresponds to a buffer overflow in AnalogX SimpleServer 1.05 that allows remote denial of service via a long GET request to a program in the cgi-bin directory. The issue is exploitable over the network with low access complexity; impact is Partial confidentiality/integrity/availabi...

CVE-2000-0421

The processbug.cgi script in Bugzilla allows remote attackers to execute arbitrary commands via shell metacharacters...

CVE-2000-0175

Buffer overflow in StarOffice StarScheduler web server allows remote attackers to gain root access via a long GET command...

CVE-2000-0297

Allaire Forums 2.0.5 allows remote attackers to bypass access restrictions to secure conferences via the rightAccessAllForums or rightModerateAllForums variables...