8750 matches found
CVE-2000-0171
CVE-2000-0171 affects the atsadc component of the atsar package for Linux. The vulnerability arises because atsadc does not properly check the permissions of an output file, enabling a local user to gain root privileges. The available sources (NVD, CVE List, and related records) confirm the issue...
CVE-2000-0228
CVE-2000-0228 affects Microsoft Windows Media License Manager. The vulnerability allows remote attackers to cause a denial of service by sending a malformed request that makes the manager halt. The connected records confirm the affected component and the root cause (malformed request triggering a...
CVE-2000-0229
The CVE-2000-0229 issue affects the gpm package, specifically gpm-root, which does not properly drop privileges. Local users can gain elevated group privileges by starting a utility from gpm-root, with the gpm-root running with root group privileges and a failed setgid behavior. Impact is local p...
CVE-2000-0235
CVE-2000-0235 describes a buffer overflow in the huh program of the orville-write package, enabling local users to gain root privileges. The documents provided confirm the vulnerable component (huh within orville-write) and the impact (local privilege escalation to root). No explicit exploitation...
CVE-2000-0246
The vulnerability CVE-2000-0246 affects Microsoft IIS 4.0/5.0 where ISAPI extension processing fails for a virtual directory mapped to a UNC share, enabling remote attackers to read ASP source and other files. OpenVAS/Nessus entries confirm ASP/HTR source disclosure via UNC-path access. No remedi...
CVE-2000-0267
Cisco Catalyst 5.4.x is affected by CVE-2000-0267, where a user can gain access to the privileged enable mode without a password. The issue is a local bypass of authentication to the enable shell, enabling partial to full privilege exposure as described (no explicit exploitation details in the do...
CVE-2000-0294
The CVE-2000-0294 issue affects FreeBSD's healthd. A buffer overflow in healthd is described as allowing local users to gain root privileges, indicating a local-privilige escalation through a vulnerable component/file in healthd. The available records do not specify exact vulnerable code paths, a...
CVE-2000-0327
Technical details for CVE-2000-0327 are not publicly provided in the supplied documents; monitor for updates.
CVE-2000-0330
CVE-2000-0330 affects the networking software in Windows 95 and Windows 98. The vulnerability allows remote attackers to execute commands via a long file name string (the “File Access URL” issue). The CVSS data indicates a network-access, high-severity impact with complete confidentiality, integr...
CVE-2000-0113
The CVE-2000-0113 entry concerns the SyGate Remote Management program where the administration service does not properly restrict access, allowing remote attackers to cause a denial of service or view network traffic statistics. Connected documents corroborate a remote controller component (SyGat...
CVE-2000-0260
The CVE-2000-0260 issue is a buffer overflow in the dvwssr.dll used by Microsoft FrontPage 98 Server Extensions for IIS, exposed via InterDev 1.0 and related IIS packages. The Core Advisory CORE-041200 documents a remotely exploitable boundary error in dvwssr.dll (FrontPage 98 extensions) that ca...
CVE-2000-0169
Batch files in the Oracle web listener ows-bin directory allow remote attackers to execute commands via a malformed URL that includes '?&'...
CVE-2000-0171
atsadc in the atsar package for Linux does not properly check the permissions of an output file, which allows local users to gain root privileges...
CVE-2000-0226
IIS 4.0 allows attackers to cause a denial of service by requesting a large buffer in a POST or PUT command which consumes memory, aka the "Chunked Transfer Encoding Buffer Overflow Vulnerability."...
CVE-2000-0230
Buffer overflow in imwheel allows local users to gain root privileges via the imwheel-solo script and a long HOME environmental variable...
CVE-2000-0232
Microsoft TCP/IP Printing Services, aka Print Services for Unix, allows an attacker to cause a denial of service via a malformed TCP/IP print request...
CVE-2000-0235
Buffer overflow in the huh program in the orville-write package allows local users to gain root privileges...
CVE-2000-0267
Cisco Catalyst 5.4.x allows a user to gain access to the "enable" mode without a password...
CVE-2000-0277
Microsoft Excel 97 and 2000 does not warn the user when executing Excel Macro Language XLM macros in external text files, which could allow an attacker to execute a macro virus, aka the "XLM Text Macro" vulnerability...