CVE-2000-0346

AppleShare IP 6.1 and later allows a remote attacker to read potentially sensitive information via an invalid range request to the web server...

CVE-2000-0337

CVE-2000-0337 describes a buffer overflow in the Xsun X server component of Solaris 7. The vulnerability allows local users to gain root privileges by supplying an excessively long -dev parameter. The available documents identify the affected system as Solaris 7 and the vulnerable component as th...

CVE-2000-0361

The PPP wvdial.lxdialog script in wvdial 1.4 and earlier creates a .config file with world readable permissions, which allows a local attacker in the dialout group to access login and password information...

CVE-2000-0437

CVE-2000-0437 describes a buffer overflow in the CyberPatrol daemon “cyberdaemon” used in the Gauntlet and WebShield products. The flaw could be triggered by network-input and allows remote attackers to cause a denial of service or execute arbitrary commands on affected hosts. The linked Nessus e...

CVE-2000-0304

Microsoft IIS 4.0 and 5.0 with the IISADMPWD virtual directory installed allows a remote attacker to cause a denial of service via a malformed request to the inetinfo.exe program, aka the "Undelimited .HTR Request" vulnerability...

CVE-2000-0396

The add.exe program in the Carello shopping cart software allows remote attackers to duplicate files on the server, which could allow the attacker to read source code for web scripts such as .ASP files...

CVE-2000-0416

NTMail 5.x contains a vulnerability where network users can bypass proxy restrictions by redirecting requests to NTMail’s web configuration server. Affected product is NTMail 5.x; root cause is improper handling of proxy rules allowing redirection to configuration server. Documented impact: bypas...

CVE-2000-0396

CVE-2000-0396 affects the add.exe component of the Carello shopping cart software. The vulnerability allows remote attackers to duplicate files on the server, which could enable reading source code of web scripts such as .ASP files. The NVD entry lists a MEDIUM base score (5.0) with network impac...

CVE-2000-0424

The CGI counter 4.0.7 by George Burgyan allows remote attackers to execute arbitrary commands via shell metacharacters...

CVE-2000-0564

The vulnerability CVE-2000-0564 affects the guestbook CGI in the ICQ Web Front service (ICQ 2000a, 99b). The flaw permits remote denial of service when a URL with an excessively long name parameter is requested. Exploitation details are not provided in the documents; no patch/version remediation ...

CVE-2000-0249

The FRCA vulnerability in AIX allows local users to modify arbitrary files via the frcactrl configuration capability when the FRCA kernel module is loaded. A root-privilege escalation is possible because the setuid frcactrl enables non-root users to manipulate FRCA configuration and log files. Af...

CVE-2000-0376

CVE-2000-0376 affects i-drive Filo: when the setup installs an HTTP proxy server, an attacker can send an overly long HTTP GET request, overflowing a heap buffer and enabling remote code execution. Affected: Filo 1.0.0.1 for Windows NT (SP5). Mitigation: upgrade to Filo 1.5.3. The vulnerability i...

CVE-2000-0535

CVE-2000-0535 affects OpenSSL 0.9.4 and OpenSSH on FreeBSD, where FreeBSD Alpha's missing /dev/random or /dev/urandom leads to weak cryptographic keys. The issue arises from improper device checks, resulting in keys that may be easier to break. The provided documents describe the root cause and a...

CVE-2000-0352

Technical details about CVE-2000-0352 are not provided in the connected documents. The initial entry lists the Pine vulnerability but no additional specifics. Monitor for updates.

CVE-2000-0562

BlackIce Defender 2.1 and earlier, and BlackIce Pro 2.0.23 and earlier, fail to block Back Orifice traffic when the security setting is Nervous or lower. The CVE-2000-0562 entry documents this condition for these products, indicating a partial confidentiality, integrity, and availability impact w...

CVE-2000-0554

Ceilidh allows remote attackers to obtain the real path of the Ceilidh directory via the translatedpath hidden form field...

CVE-2000-0417

The HTTP administration interface to the Cayman 3220-H DSL router allows remote attackers to cause a denial of service via a long username or password...

CVE-2000-0363

Linux cdwtools 093 and earlier allows local users to gain root privileges via the /tmp directory...

CVE-2000-0387

CVE-2000-0387 affects the FreeBSD ports golddig makelev program, where local users can overwrite arbitrary files. The vulnerability is a local issue with partial integrity impact and a low base score (2.1). The available documents do not provide exploitation details, affected versions beyond the ...

CVE-2000-0311: Undefined Security Weakness

The Windows 2000 domain controller allows a malicious user to modify Active Directory information by modifying an unprotected attribute, aka the "Mixed Object Access" vulnerability...