8754 matches found
CVE-2000-0479
Dragon FTP server is affected by CVE-2000-0479: a remote buffer overflow triggered by a very long USER command can crash the server, with the potential for arbitrary code execution as described by Nessus. Affected product/version details are not provided in the sources here beyond “Dragon FTP ser...
CVE-2000-0479
Dragon FTP server allows remote attackers to cause a denial of service via a long USER command...
CVE-2000-0407
Buffer overflow in Solaris netpr program allows local users to execute arbitrary commands via a long -p option...
CVE-2000-0453
XFree86 3.3.x and 4.0 are affected by a DoS due to a negative counter value in a malformed TCP packet sent to port 6000. The root cause is a malformed/negative counter handling in the TCP processing. Practical impact is denial of service as described; no exploitation details are provided in the d...
CVE-2000-0526
MailStudio 2000 (mailview.cgi) 2.0 and earlier is affected by CVE-2000-0526 via a directory traversal (.. ) attack that allows remote attackers to read arbitrary files. The vulnerability targets the mailview.cgi CGI program and results in partial confidentiality impact. The provided documents do ...
CVE-2000-0334
CVE-2000-0334 affects the Allaire Spectra container editor preview tool. The issue arises from improper enforcement of object security, permitting an attacker to perform unauthorized activities through an object-method added to the container object via a publishing rule. The documented impact is ...
CVE-2000-0402
The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator sa account in plaintext in a log file which is readable by any user, aka the "SQL Server 7.0 Service Pack Password" vulnerability...
CVE-2000-0428
Buffer overflow in the SMTP gateway for InterScan Virus Wall 3.32 and earlier allows a remote attacker to execute arbitrary commands via a long filename for a uuencoded attachment...
CVE-2000-0361
The PPP wvdial.lxdialog script in wvdial 1.4 and earlier creates a .config file with world readable permissions, which allows a local attacker in the dialout group to access login and password information...
CVE-2000-0353
Pine 4.x allows a remote attacker to execute arbitrary commands via an index.html file which executes lynx and obtains a uudecoded file from a malicious web server, which is then executed by Pine...
CVE-2000-0390
Buffer overflow in krb425convprincipal function in Kerberos 5 allows remote attackers to gain root privileges...
CVE-2000-0405
The CVE-2000-0405 entry affects L0pht AntiSniff and describes a buffer overflow in the way it handles DNS responses. A malformed DNS response packet could allow remote attackers to execute arbitrary commands on the affected system. The root cause is the overflow in the DNS-response processing pat...
CVE-2000-0480
Dragon telnet server allows remote attackers to cause a denial of service via a long username...
CVE-2000-0389
Buffer overflow in krbrdreq function in Kerberos 4 and 5 allows remote attackers to gain root privileges...
CVE-2000-0545
The CVE-2000-0545 vulnerability concerns the mailx (Mail) command on Linux where a buffer overflow is triggered by a long -c parameter. Impact is local privilege escalation; exploitation details or specific fixed versions are not provided in the connected documents. No remediation instructions ar...
CVE-2000-0360
INN buffer overflow (CVE-2000-0360) affects INN servers prior to 2.2.2, where the remote server fails to perform proper bounds checking, allowing a remote attacker to crash the service by sending a maliciously formatted news article. Public sources (NVD/Nessus/OpenVAS) corroborate a remote DoS ri...
CVE-2000-0018
wmmon in FreeBSD allows local users to gain privileges via the .wmmonrc configuration file...
CVE-2000-0359
thttpd (Trivial HTTP) prior to version 2.05 is affected by a remote buffer overflow triggered by a long If-Modified-Since header. The CVE-2000-0359 entry indicates an overflow that can allow remote code execution or denial of service. Public details in connected documents specify the vulnerable c...
CVE-2000-0531
CVE-2000-0531 : Linux gpm program vulnerability where local users can cause a denial of service by flooding the /dev/gpmctl device with STREAM sockets. The NVD entry shows a LOCAL attack vector, LOW base severity, and PARTIAL availability impact; no remediation or workaround details are provided ...
CVE-2000-0032
Solaris dmi_cmd vulnerability CVE-2000-0032 allows local users to crash the dmispd daemon by placing a malformed file in /var/dmi/db. The description does not provide exploit details, affected versions, or remediation. No additional technical details are given in the connected documents. Actionab...