8750 matches found
CVE-2000-0367
The CVE-2000-0367 entry concerns the eterm 0.8.8 package on Debian GNU/Linux. It describes a local privilege escalation vulnerability that could allow an attacker to gain root privileges. The documented impact is local, with full confidentiality, integrity, and availability implications for the a...
CVE-2000-0371
Technical details for CVE-2000-0371 are not publicly available in the provided documents. The materials here reiterate that the libmediatool library used by KDE mediatool can allow local symlink-based file creation. Monitor for updates.
CVE-2000-0030
CVE-2000-0030 affects Solaris dmispd dmi_cmd, allowing a local user to exhaust restricted disk space by adding files to /var/dmi/db. The NVD entry lists a MEDIUM base score (5.0) with availability impact and no confidentiality/integrity impact, and indicates a local-access condition despite the C...
CVE-2000-0305
Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a denial of service by sending a large number of identical fragmented IP packets, aka jolt2 or the "IP Fragment Reassembly" vulnerability...
CVE-2000-0432
The CVE-2000-0432 issue affects the calendar CGI scripts by Matt Kruse, specifically calendar_admin.pl, which are susceptible to remote command execution via shell metacharacters. The Nessus entry confirms the vulnerable component as the calendar_admin.pl CGI installed in /cgi-bin, with a well-kn...
CVE-2000-0476
GNOME VTE before 0.76.3 allows a denial of service (memory consumption) via a window resize escape sequence, a related issue to CVE-2000-0476. Connected sources show this affects vte291 (TencentOS TencentOS Server 4 advisory) and is mirrored in Amazon Linux 2 advisories (ALAS2-2024-2610, ALAS-202...
CVE-2000-0370
The debug option in Caldera Linux smail allows remote attackers to execute commands via shell metacharacters in the -D option for the rmail command...
CVE-2000-0361
The CVE-2000-0361 issue affects wvdial 1.4 and earlier, where the PPP wvdial.lxdialog script creates a .config file with world-readable permissions. This allows a local attacker who is in the dialout group to access login credentials stored in that file. The available connected sources confirm th...
CVE-2000-0406
The CVE-2000-0406 entry describes: Netscape Communicator before 4.73 and Navigator 4.07 do not properly validate SSL certificates, enabling remote attackers to redirect traffic to a malicious server (Acros-Suencksen SSL) and potentially steal data. No remediation or exploit details are provided i...
CVE-2000-0034
Netscape 4.7 is affected by CVE-2000-0034: during IMAP/POP sessions, the application records user passwords in the preferences.js file even when “remember passwords” is not enabled. Root cause is password storage in preferences.js, as documented in PT-1999-1842 and echoed in CVE records. Impact i...
CVE-2000-0524
Microsoft Outlook and Outlook Express allow remote attackers to cause a denial of service by sending email messages with blank fields such as BCC, Reply-To, Return-Path, or From...
CVE-2000-0461
Technical details for CVE-2000-0461 are not publicly available in the provided documents. Please monitor for updates from official advisories and databases.
CVE-2000-0262
The CVE-2000-0262 issue affects AVM KEN! ISDN Proxy Server. A malformed request can trigger a denial-of-service, as reported by multiple sources. The Nessus plugin specifies a remote DoS resulting in a crash/segmentation fault when the server is sent a non-HTTP request, and notes that exploitatio...
CVE-2000-0395
CVE-2000-0395 is a reported buffer overflow in CProxy 3.3 that allows remote users to cause a denial of service by sending a long HTTP request. The entry specifies a network attack vector and a low-to-moderate base score (MEDIUM) with availability impact. The connected documents confirm the vulne...
CVE-2000-0442
CVE-2000-0442 affects qpopper 2.53 and earlier. A formatting string vulnerability in the From: header processed by the UIDL/euidl path allows local users to gain privileges (to group ID mail) and potentially execute arbitrary code. This is supported by multiple sources (NVD entry, FreeBSD VuXML/O...
CVE-2000-0390
CVE-2000-0390 describes a buffer overflow in the krb425_conv_principal function of Kerberos 5. The vulnerability allows remote attackers to gain root privileges via the affected Kerberos 5 component. Documents identify the root cause as a buffer overflow in the krb425_conv_principal routine, with...
CVE-2000-0236
CVE-2000-0236 affects Netscape Enterprise Server (and related Web Publisher components) where enabling Directory Indexing allows unauthenticated remote attackers to enumerate server directories via published tags such as ?wp-ver-info and ?wp-cs-dump . The vulnerability is triggered by the Web Pub...
CVE-2000-0464
CVE-2000-0464 affects Internet Explorer 4.x and 5.x, with a buffer overflow in the ActiveX parameter parsing capability (the “Malformed Component Attribute” vulnerability). The available documents describe remote code execution as the impact but do not provide concrete patch/version details or re...
CVE-2000-0545
The CVE-2000-0545 vulnerability concerns the mailx (Mail) command on Linux where a buffer overflow is triggered by a long -c parameter. Impact is local privilege escalation; exploitation details or specific fixed versions are not provided in the connected documents. No remediation instructions ar...