CVE-2000-0423

The CVE-2000-0423 entry describes a vulnerability in Netwin DNEWSWEB CGI where a buffer overflow allows remote attackers to execute arbitrary commands by supplying long values for parameters such as group, cmd, and utag. Affected component is the DNEWSWEB CGI program; root cause is a buffer overf...

CVE-2000-0429

CVE-2000-0429 concerns Cart32 3.0 and earlier. The vulnerability is a backdoor password in cart32.exe (password: ‘wemilo’) that allows a remote attacker to execute arbitrary commands in the web server context and potentially access credit card information. An additional path concern is that the a...

CVE-2000-0434

The CVE-2000-0434 issue concerns the Allmanage web site administration software. The underlying problem is that the administrative password is stored in plaintext in a file that could be accessed by remote attackers. This creates the potential for an attacker to obtain the password and gain unaut...

CVE-2000-0450

Technical details (affected product, version, root cause, impact, remediation) are not publicly provided in the supplied documents. Monitor for updates.

CVE-2000-0449

CVE-2000-0449 : Omnis Studio 2.4 uses weak encryption (trivial encoding) to protect database fields. The provided metrics assign a 10.0 base score (HIGH) with network attack vector and complete impact to confidentiality, integrity, and availability. No exploitation details, specific fixes, or rem...

CVE-2000-0444

HP Web JetAdmin 6.0 is affected. The vulnerability is a remote denial-of-service caused by a malformed URL targeting port 8000. Root cause described as malformed URL handling; no additional exploit details or affected versions beyond the 6.0 release are provided in the documents. No remediation o...

CVE-2000-0413

The vulnerability CVE-2000-0413 affects the FrontPage Server Extensions shtml.exe component in IIS 4.0/5.0. A remote attacker can trigger an error by requesting a non-existent HTML/HTM/ASP/SHTML file, causing the server to reveal the local absolute path of the web root in the error message. This ...

CVE-2000-0433

CVE-2000-0433 affects the SuSE aaa_base package. The description states that it installs some system accounts with home directories set to /tmp, enabling local users to gain privileges by creating standard user startup scripts such as profiles. The CVSSv2 vector (LOCAL, LOW complexity, NONE authe...

CVE-2000-0383

The file transfer component of AOL Instant Messenger AIM reveals the physical path of the transferred file to the remote recipient...

CVE-2000-0386

FileMaker Pro 5 Web Companion allows remote attackers to send anonymous or forged email...

CVE-2000-0401

Buffer overflows in redirect.exe and changepw.exe in PDGSoft shopping cart allow remote attackers to execute arbitrary commands via a long query string...

CVE-2000-0429

A backdoor password in Cart32 3.0 and earlier allows remote attackers to execute arbitrary commands...

CVE-2000-0444

HP Web JetAdmin 6.0 allows remote attackers to cause a denial of service via a malformed URL to port 8000...

CVE-2000-0384

NetStructure 7110 and 7180 are affected by an authentication issue due to undocumented accounts (servnow, root, wizard) whose passwords can be inferred from the device MAC address. Remote attackers could gain root access. The description in the CVE matches the vendor-agnostic details: a hard-to-j...

CVE-2000-0415

Outlook Express 4.x is affected by a buffer overflow triggered by mail/news messages with a .jpg or .bmp attachment having a long filename. The vulnerability is reported to allow denial of service. The connected documents corroborate the issue as described for Outlook Express 4.x; no specific exp...

CVE-2000-0385

FileMaker Pro 5 Web Companion allows remote attackers to bypass Field-Level database security restrictions via the XML publishing or email capabilities...

CVE-2000-0386

The CVE-2000-0386 entry concerns FileMaker Pro 5 Web Companion, where remote attackers can send anonymous or forged email. The provided documents confirm this description but do not include deeper root-cause, affected versions, exploit details, or remediation. No explicit fix/version information ...

CVE-2000-0420

The default configuration of SYSKEY in Windows 2000 stores the startup key in the registry, which could allow an attacker tor ecover it and use it to decrypt Encrypted File System EFS data...

CVE-2000-0475

Windows 2000 allows a local user process to access another user's desktop within the same windows station, aka the "Desktop Separation" vulnerability...

CVE-2000-0420

CVE-2000-0420 concerns Windows 2000 SYSKEY: the default SYSKEY configuration stores the startup key in the registry, which could allow an attacker with local access to recover the key and decrypt EFS data. The linked records reiterate the vulnerability description and do not provide exploit code ...