8747 matches found
CVE-2000-0012
Affected component: w3-msql CGI in the miniSQL package. Root cause: a buffer overflow in the w3-msql CGI program. Impact: remote attackers could exploit this to execute commands and potentially gain a shell on the affected system. Exploitation status: described as a remote overflow vulnerability;...
CVE-2000-0014
The CVE-2000-0014 entry describes a denial-of-service in the Savant web server triggered by a crafted URL containing a null character. The impact is a Partial Availability impact with no confidentiality or integrity impact, as per CVSS v2 metrics, and the exploitation could be performed over the ...
CVE-2000-0024
CVE-2000-0024 affects Microsoft IIS. The vulnerability is caused by improper URL canonicalization, enabling remote attackers to bypass access controls in third-party software through escape characters. The provided documents identify the issue and its description, but do not include concrete reme...
CVE-2000-0033
CVE-2000-0033 affects InterScan VirusWall SMTP scanner; vulnerability arises from improper handling of messages with malformed attachments. CVSS v2 base score 5.0 (MEDIUM) with no confidentiality/availability impact and partial integrity impact. No remediation details are provided in the documents.
CVE-2000-0042
CVE-2000-0042 : Buffer overflow in the CSM Mail Server when handling a long HELO command allows remote attackers to cause a denial of service and potentially execute commands. Affected: CSM Mail Server (MTA). Consequence: crash or arbitrary code execution as per sources. Remediation: apply vendor...
CVE-2000-0043
The CVE-2000-0043 issue affects the CamShot WebCam HTTP server and is caused by a buffer overflow in handling long GET requests, enabling remote command execution. The available data confirms the vulnerability type, affected component, and the remote nature of the exploit, with a base score of 7....
CVE-2000-0050
The Allaire Spectra Webtop contains an access-control flaw: authenticated users can reach other Webtop sections by directly specifying explicit URLs. This implies horizontal privilege escalation via URL manipulation. The issue is described in CVE-2000-0050 with a CVSS v2 base score of 4.6 (Medium...
CVE-2000-0051
CVE-2000-0051 affects the Allaire Spectra Configuration Wizard. The vulnerability allows remote attackers to cause a denial of service by repeatedly resubmitting data collections for indexing via a URL. CVSS: NETWORK, LOW complexity, no authentication, availability impact PARTIAL, base score 5.0 ...
CVE-2000-0070
CVE-2000-0070 affects Windows NT 4.0 via the NtImpersonateClientOfPort local procedure call, enabling local privilege escalation. The vulnerability allows a local user to gain complete control (confidentiality, integrity, and availability flags impacted) through impersonation of a port request. T...
CVE-2000-0165
CVE-2000-0165 affects the DeleGate proxy server, where the application is vulnerable to multiple remote buffer overflows. The available sources indicate that these overflows allow a remote attacker to execute arbitrary commands, potentially leading to denial of service or full code execution. A d...
CVE-2000-0223
CVE-2000-0223 affects the wmcdplay CD player component used with the WindowMaker desktop. The vulnerability is a buffer overflow caused by handling a long parameter, enabling local users to gain root privileges. The available documents do not specify specific versions, affected builds, or the exa...
CVE-2000-0042
Buffer overflow in CSM mail server allows remote attackers to cause a denial of service or execute commands via a long HELO command...
CVE-2000-0043
Buffer overflow in CamShot WebCam HTTP server allows remote attackers to execute commands via a long GET request...
CVE-2000-0050
The Allaire Spectra Webtop allows authenticated users to access other Webtop sections by specifying explicit URLs...
CVE-2000-0051
The Allaire Spectra Configuration Wizard allows remote attackers to cause a denial of service by repeatedly resubmitting data collections for indexing via a URL...
CVE-2000-0070
NtImpersonateClientOfPort local procedure call in Windows NT 4.0 allows local users to gain privileges, aka "Spoofed LPC Port Request."...
CVE-2000-0181
Firewall-1 3.0 and 4.0 leaks packets with private IP address information, which could allow remote attackers to determine the real IP address of the host that is making the connection...
CVE-2000-0192
The default installation of Caldera OpenLinux 2.3 includes the CGI program rpmquery, which allows remote attackers to determine what packages are installed on the system...
