8747 matches found
CVE-2000-0551
The file transfer mechanism in Danware NetOp 6.0 does not provide authentication, which allows remote attackers to access and modify arbitrary files...
jolt2 - Remote DoS against NT, W2K, 9x
BindView Security Advisory -------- Jolt2 - Remote Denial of Service attack against Windows 2000, NT4, and Win9x Issue Date: May 19, 2000 Contact: [email protected] Topic: Fragmented IP packets cause denial of service Overview: Sending large numbers of identical fragmented IP packets to a...
CVE-2000-0305
Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a denial of service by sending a large number of identical fragmented IP packets, aka jolt2 or the "IP Fragment Reassembly" vulnerability...
CVE-2000-0451
The Intel express 8100 ISDN router allows remote attackers to cause a denial of service via oversized or fragmented ICMP packets...
CVE-2000-0321
CVE-2000-0321 describes a remote buffer overflow in the IC Radius package that can be triggered by a long user name, potentially causing a denial of service. The records here do not specify affected versions, vendor, concrete exploit details, or a remediation/patch. Exploitation status is not pro...
CVE-2000-0326
The CVE describes Meeting Maker using a weak polyalphabetic substitution cipher for passwords, enabling remote attackers to sniff and decrypt Meeting Maker account passwords. Technical detail confirms the affected component is the password handling mechanism (encryption scheme) but does not speci...
CVE-2000-0343
The CVE-2000-0343 entry describes a buffer overflow in Sniffit 0.3.x when the -L logging option is enabled. The overflow can be triggered by a long MAIL FROM header, allowing a remote attacker to execute arbitrary commands. The provided documents specify the affected product and the root cause (b...
CVE-2000-0325
The Microsoft Jet database engine (specifically drivers MSJET35.DLL and MSJET40.DLL ) contains a vulnerability known as the VBA Shell vulnerability. This flaw allows an attacker to execute arbitrary commands by creating malicious .xls or .doc files that incorporate VBA shell commands. When a user...
CVE-2000-0317
Buffer overflow in Solaris 7 lpset allows local users to gain root privileges via a long -r option...
CVE-2000-0333
tcpdump, Ethereal, and other sniffer packages allow remote attackers to cause a denial of service via malformed DNS packets in which a jump offset refers to itself, which causes tcpdump to enter an infinite loop while decompressing the packet...
CVE-2000-0343
Buffer overflow in Sniffit 0.3.x with the -L logging option enabled allows remote attackers to execute arbitrary commands via a long MAIL FROM mail header...
CVE-2000-0450
Vulnerability in bbd server in Big Brother System and Network Monitor allows an attacker to execute arbitrary commands...
CVE-2000-0317
CVE-2000-0317 describes a buffer overflow in Solaris 7 lpset, leading to local root privileges when a long -r option is supplied. The entry specifically notes local privilege escalation, but the provided documents do not include detailed information on affected versions beyond Solaris 7, nor expl...
CVE-2000-0333
The CVE affects tcpdump, Ethereal, and other sniffer packages that decode DNS packets. A crafted DNS query with malformed compressed labels (a pointer that references itself or creates cycles) can cause the decoder to loop, potentially consuming all CPU and crashing the process, i.e., a denial-of...
CVE-2000-0464
Internet Explorer 4.x and 5.x allows remote attackers to execute arbitrary commands via a buffer overflow in the ActiveX parameter parsing capability, aka the "Malformed Component Attribute" vulnerability...
windows2k.iss
I found there is a security problem about shtml.exe that allows anyone to explore the local path of IIS web server. Tested on windows2000 server.shtml.exe is a program issued with Forntpage Extention server for viewing smart HTML file, If we install Frontpage on Windows2000 server, a directory...
CVE-2000-0432
The calender.pl and the calendaradmin.pl calendar scripts by Matt Kruse allow remote attackers to execute arbitrary commands via shell metacharacters...
Advisory: Office 2000 Scripting
@Stake Inc. L0pht Research Labs www.atstake.com www.L0pht.com Security Advisory Advisory Name: Microsoft Office 2000 UA Control Scripting Release Date: 5-12-2000 Application: Microsoft Office 2000 Platform: Windows 95/98, NT 4.0 and 2000 Severity: Malicious active content can execute regardless o...