CVE-2000-0239

CVE-2000-0239 concerns the MERCUR WebView WebMail server. A buffer overflow is triggered by a long mail_user parameter in a GET request (e.g., /mmain.html&mail_user=…); this can cause a denial of service and, per the Nessus plugin, potentially allow arbitrary code execution on a remote host. Affe...

CVE-2000-0241

The CVE-2000-0241 entry concerns vqSoft vqServer, where passwords and other sensitive data are stored in cleartext in the server.cfg file. This exposed data can let an attacker gain privileges if they can read the configuration file. The available connected documentation confirms the issue, but d...

CVE-2000-0242

CVE-2000-0242 affects WindMail where the CGI component (windmail.exe) is vulnerable to remote command execution via shell metacharacters. The underlying issue allows an attacker over the network to read arbitrary files or execute arbitrary commands on the remote server through crafted input to th...

CVE-2000-0244

The CVE-2000-0244 entry concerns the Citrix ICA (Independent Computing Architecture) protocol, which uses weak encryption (XOR) for user authentication. According to the provided data, the vulnerability has a CVSS v2 base score of 10.0 (HIGH) with network attack vector, no authentication required...

CVE-2000-0241

vqSoft vqServer stores sensitive information such as passwords in cleartext in the server.cfg file, which allows attackers to gain privileges...

CVE-2000-0261

The AVM KEN! web server allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2000-0282

TalentSoft webpsvr daemon in the Web+ shopping cart application allows remote attackers to read arbitrary files via a .. dot dot attack on the webplus CGI program...

CVE-2000-0288

Infonautics getdoc.cgi allows remote attackers to bypass the payment phase for accessing documents via a modified form variable...

CVE-2000-0283

The default installation of IRIX Performance Copilot allows remote attackers to access sensitive system information via the pmcd daemon...

CVE-2000-0253

The dansie shopping cart application cart.pl allows remote attackers to modify sensitive purchase information via hidden form fields...

CVE-2000-0172

The CVE concerns the mtr program, where a seteuid call is used only when attempting to drop privileges, enabling local users to gain root privileges. The available sources confirm a local-privilege escalation risk but do not provide concrete exploit details, affected versions, or remediation step...

CVE-2000-0182

The affected software is iPlanet Web Server 4.1. The vulnerability (CVE-2000-0182) allows a remote attacker to cause a denial of service by issuing a large number of GET commands, leading to memory exhaustion and a kernel panic. The OpenVAS/PT Security entries corroborate the DoS impact via exces...

CVE-2000-0186

The CVE-2000-0186 entry concerns a buffer overflow in the dump utility of the Linux ext2fs backup package. The underlying issue is a too-long command line argument, which can allow a local user to gain privileges. The affected component is the dump utility within the ext2fs backup toolchain; the ...

CVE-2000-0189

The CVE-2000-0189 entry concerns ColdFusion Server 4.x where remote attackers can determine the server’s real pathname by requesting application.cfm or onrequestend.cfm. The available sources reproduce this description with no explicit exploit code or confirmed active exploitation details in the ...

CVE-2000-0201

The CVE concerns Internet Explorer 5.x where window.showHelp() can execute compiled HTML help files (CHM) from non-local paths, enabling arbitrary code via Microsoft Networking. Technical context from connected docs shows the vulnerability can be triggered when a CHM is placed locally or accessib...

CVE-2000-0202

CVE-2000-0202 affects Microsoft SQL Server 7.0 and Microsoft Data Engine (MSDE) 1.0. A malformed SELECT statement in an SQL query allows remote attackers to gain privileges. The connected OpenVAS entry corroborates multiple MSSQL vulnerabilities; however, exploitation details, affected versions b...

CVE-2000-0207

CVE-2000-0207 affects SGI InfoSearch Infosrch.cgi where the fname parameter fails to sanitize input, enabling remote arbitrary command execution via shell metacharacters. This is a remote web-server issue likely yielding command execution under the web server user. Nessus notes describe the flaw ...

CVE-2000-0208

The CVE-2000-0208 issue affects the htsearch CGI in the htdig/ht://Dig package. Affected component is the htsearch CGI; the root cause is that parameters to htsearch can be crafted with backticks to cause remote reading of arbitrary files, enabling information disclosure. Impact per sources is pa...

CVE-2000-0210

CVE-2000-0210 affects the lit program in Sun Flex License Manager (FlexLM). The vulnerability arises because lit follows symbolic links, allowing a local user to modify arbitrary files on the host. Root cause: improper handling of symlinks in the lit utility. Impact described in sources is local ...

CVE-2000-0211

CVE-2000-0211 affects Microsoft Windows Media Server; a DoS can be triggered by a sequence of misordered handshake packets to the Windows Media Service (the OpenVAS/NASL entry notes port 1755). The underlying issue is a malformed/incorrect handshake sequence that can crash the server. Description...