8747 matches found
CVE-2000-0226
The CVE-2000-0226 entry maps to a concrete IIS 4.0 vulnerability: the chunked-encoding transfer mechanism does not cap the buffer size, allowing a malicious POST/PUT request to reserve a huge amount of memory and potentially exhaust server resources. This is described as a denial of service risk ...
CVE-2000-0258
CVE-2000-0258 affects IIS 4.0 and 5.0. The provided documents describe a remote denial-of-service vulnerability triggered by sending many URLs containing a large number of escaped characters, referred to as the "Myriad Escaped Characters" vulnerability. The NVD entry provides CVSS scores (2.0: 5....
CVE-2000-0169
CVE-2000-0169 is an Oracle Web Listener (ows-bin CGI) vulnerability in Oracle Application Server (Web Listener component) affecting the 4.0.x series according to OpenVAS/NVD entries. The issue allows remote command execution via a crafted URL containing a malformed sequence “?&” in batch files wi...
CVE-2000-0234
CVE-2000-0234 affects the Cobalt RaQ2 and RaQ3 appliances via the default access.conf configuration, which permits remote attackers to view the contents of a ".htaccess" file. The root cause is the default configuration allowing this exposure, leading to partial confidentiality impact. The connec...
CVE-2000-0323
Technical details are not publicly available in the provided documents. No specifics on affected products, versions, or mitigation are disclosed. Monitor for updates.
CVE-2000-0231
The CVE-2000-0231 entry describes a vulnerability in Linux kreatecd where a user-supplied path is trusted to locate the cdrecord program. This allows local users to gain root privileges due to the underlying trust in an attacker-controlled path. Affected component: kreatecd (Linux). Root cause: t...
CVE-2000-0274
The CVE describes a denial-of-service condition in Linux related to the trustees kernel patch triggered by accessing a file or directory with an excessively long name. Connected records indicate Linux kernel/trustees patch is the affected area, with DoS impact but no explicit product version or p...
CVE-2000-0245
Technical details about CVE-2000-0245 are not publicly available in the provided documents. Monitor for updates from official advisories.
CVE-2000-0328
CVE-2000-0328 refers to Windows NT 4.0 where TCP initial sequence numbers (ISNs) are generated predictably, enabling spoofing or hijacking of TCP sessions. Connected sources expand the scope to note that several TCP/IP stacks have been observed with weak ISN generation and that attacks can disrup...
CVE-2000-0329
The CVE concerns a Microsoft ActiveX control vulnerability in the Active Setup Control that allows a remote attacker to execute a malicious cabinet file via an attachment and an embedded script in an HTML email. Affected component is an ActiveX control; impact is remote code execution with partia...
CVE-2000-0232
CVE-2000-0232 affects Microsoft TCP/IP Printing Services (Print Services for Unix). The vulnerability is that a malformed TCP/IP print request can be used to cause a denial of service. It is a local-attack, low-severity issue (CVSS v2 base score 2.1, availability impact PARTIAL). The documentatio...
CVE-2000-0246
IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote attackers to read the source code of ASP and other files, aka the "Virtualized UNC Share" vulnerability...
CVE-2000-0277: Undefined Security Weakness
Microsoft Excel 97 and 2000 does not warn the user when executing Excel Macro Language XLM macros in external text files, which could allow an attacker to execute a macro virus, aka the "XLM Text Macro" vulnerability...
CVE-2000-0467
Buffer overflow in Linux splitvt 1.6.3 and earlier allows local users to gain root privileges via a long password in the screen locking function...
CVE-2000-0507
Imate Webmail Server 2.5 allows remote attackers to cause a denial of service via a long HELO command...
CVE-2000-0509
Buffer overflows in the finger and whois demonstration scripts in Sambar Server 4.3 allow remote attackers to execute arbitrary commands via a long hostname...
CVE-2000-0487
The Protected Store in Windows 2000 does not properly select the strongest encryption when available, which causes it to use a default of 40-bit encryption instead of 56-bit DES encryption, aka the "Protected Store Key Length" vulnerability...
CVE-2000-0470
Allegro RomPager HTTP server allows remote attackers to cause a denial of service via a malformed authentication request...
Allegro RomPager 2.10 - URL Request Denial of Service
Allegro RomPager 2.10 - URL Request Denial of Service Allegro's RomPager is reported prone to a remote denial of service vulnerability. If a specifically-malformed request is sent to Allegro's RomPager, it will crash, often crashing the parent device as well. In this manner, network hardware and...
