CVE-2000-0280

The CVE-2000-0280 entry describes a buffer overflow in RealNetworks RealPlayer client versions 6 and 7. The underlying issue is a vulnerability in handling a long Location URL, which can allow remote attackers to cause a denial of service. Public documentation here notes the affected component as...

CVE-2000-0270

The make-temp-name Lisp function in Emacs 20 creates temporary files with predictable names, which allows attackers to conduct a symlink attack...

CVE-2000-0271

read-passwd and other Lisp functions in Emacs 20 do not properly clear the history of recently typed keys, which allows an attacker to read unencrypted passwords...

CVE-2000-0275

CRYPTOCard CryptoAdmin for PalmOS uses weak encryption to store a user's PIN number, which allows an attacker with access to the .PDB file to generate valid PT-1 tokens after cracking the PIN...

CVE-2000-0281

Buffer overflow in the Napster client beta 5 allows remote attackers to cause a denial of service via a long message...

CVE-2000-0286

X fontserver xfs allows local users to cause a denial of service via malformed input to the server...

CVE-2000-0291

Buffer overflow in Star Office 5.1 allows attackers to cause a denial of service by embedding a long URL within a document...

CVE-2000-0295

Buffer overflow in LCDproc allows remote attackers to gain root privileges via the screenadd command...

CVE-2000-0299

Buffer overflow in WebObjects.exe in the WebObjects Developer 4.5 package allows remote attackers to cause a denial of service via an HTTP request with long headers such as Accept...

CVE-2000-0293

CVE-2000-0293 affects SuSE Linux 6.3 (and cron.daily in earlier versions). The issue arises in file deletion logic: local users can cause arbitrary files to be deleted by creating files whose names include spaces, which are then misinterpreted by aaa_base when it deletes expired files from /tmp. ...

CVE-2000-0271

In CVE-2000-0271, Emacs 20’s read-passwd and related Lisp functions do not properly clear the history of recently typed keys. This can allow an attacker to read unencrypted passwords stored in the command history. The issue is rooted in the Lisp password/history handling within Emacs 20. The prov...

CVE-2000-0295

LCDproc is vulnerable to a remote buffer overflow via the screen_add command. The CVE description states attackers can gain root privileges on the host; OpenVAS notes the LCDproc process runs with typical privileges (usually nobody). Affected products/versions are LCDproc prior to 0.4.1. Remediat...

CVE-2000-0299

CVE-2000-0299 affects the WebObjects Developer 4.5 package, where the WebObjects.exe component is vulnerable to a buffer overflow triggered by HTTP requests with long headers (e.g., Accept). The description states this allows remote denial of service. No explicit patch or remediation is provided ...

CVE-2000-0280

Buffer overflow in the RealNetworks RealPlayer client versions 6 and 7 allows remote attackers to cause a denial of service via a long Location URL...

CVE-2000-0269

CVE-2000-0269 : Emacs 20 does not properly set permissions for a slave PTY when starting a new subprocess, allowing local users to read or modify communications between Emacs and the subprocess. Root cause: incorrect PTY permissions handling. Impact: partial confidentiality (read/modify communica...

CVE-2000-0266

The CVE-2000-0266 entry describes a vulnerability in Internet Explorer 5.01 where a malicious applet can bypass the cross-frame security policy by interacting with the Java JSObject to modify DOM properties, allowing an IFRAME to load an arbitrary JavaScript URL. This reveals a client-side cross-...

CVE-2000-0300

The CVE refers to PcAnywhere 9.x where the default encryption method is weak, enabling remote attackers to sniff and decrypt PcAnywhere or NT domain accounts. Affected software: PcAnywhere 9.x (default encryption). Root cause: use of weak default encryption in the authentication pathway. Impact: ...

CVE-2000-0288

CVE-2000-0288 affects Infonautics getdoc.cgi. The vulnerability allows remote attackers to bypass the payment phase for accessing documents by altering a form variable. The available sources confirm the existence and description of this issue but do not provide concrete details on affected versio...

CVE-2000-0284

The CVE-2000-0284 issue affects University of Washington IMAP Server (UW-IMAP) imapd, specifically involving a buffer overflow in processing command arguments (e.g., LIST, LSUB) that can be triggered by a valid user. The vulnerability enables an authenticated user to potentially execute arbitrary...

CVE-2000-0010

The CVE-2000-0010 entry concerns WebWho+ whois.cgi, a CGI script where the TLD parameter can be manipulated to execute arbitrary shell commands on the remote host. Multiple sources (NVD/NASM-like entries and PT-PTSecurity) confirm remote command execution as the impact, due to shell metacharacter...