CVE-2000-0022

Technical details about CVE-2000-0022 are not publicly provided in the supplied documents. Monitor for updates from referenced sources; only the basic description about Lotus Domino CGI-bin anonymous access is available.

CVE-2000-0023

The CVE-2000-0023 issue affects the Lotus Domino HTTP server, where a buffer overflow in URL processing can be exploited by remote attackers to cause a denial of service by sending a long URL (notably via long /cgi-bin relative URLs). The Nessus plugin for this CVE corroborates a DoS impact from ...

CVE-2000-0025

The CVE-2000-0025 entry concerns IIS 4.0 and Site Server 3.0, where remote attackers can read ASP source code if the target file resides in a virtual directory whose name includes extensions such as .com, .exe, .sh, .cgi, or .dll (the so‑called Virtual Directory Naming vulnerability). The affecte...

CVE-2000-0026

CVE-2000-0026 affects UnixWare’s i2odialogd daemon. A buffer overflow is triggered by a too-long username/password string sent to the remote service, allowing an attacker to potentially execute arbitrary code with root privileges. The vulnerability is documented across multiple sources (CVE/NVD) ...

CVE-2000-0029

Technical details about CVE-2000-0029 are not publicly provided in the supplied documents; only the basic description is available. Monitor for updates.

CVE-2000-0031

The CVE-2000-0031 issue affects the initscripts package in Red Hat Linux and is caused by a symlink attack that allows local users to gain privileges. Connected sources (NVD, PT-2000-1038) confirm local privilege escalation via a symlink-related flaw in initscripts; no explicit fix/version detail...

CVE-2000-0037

Technical details for CVE-2000-0037 are not publicly provided in the connected documents; only the high-level description is available. Monitor for updates.

CVE-2000-0039

CVE-2000-0039 affects AltaVista search engine via a directory traversal vulnerability in the query.cgi CGI program, allowing remote attackers to read files above the document root by exploiting a .. (dot dot) parameter. The issue is documented across multiple sources (NVD, CVE List, Nessus listin...

CVE-2000-0040

The CVE-2000-0040 issue affects glFtpD, where local users can gain privileges by supplying metacharacters in the SITE ZIPCHK command. Documentation in PT-1999-1848 notes that affected versions are not specified and provides no information about a fix. Overall, the vulnerability arises from improp...

CVE-2000-0041

CVE-2000-0041 involves Macintosh systems that generate large ICMP datagrams in response to malformed datagrams, enabling ICMP amplification for flood attacks. The CVE entry documents an impact of partial availability with a network attack vector and low attack complexity, resulting in a potential...

CVE-2000-0088

CVE-2000-0088 describes a buffer overflow in the conversion utilities for Word 5 documents (Japanese, Korean and Chinese) that allows a local attacker to execute arbitrary commands. The vulnerability is identified as the "Malformed Conversion Data" issue. The available references indicate a high ...

CVE-2000-0089

Technical details about CVE-2000-0089 are not publicly available in the provided connected documents. Monitor for updates from official sources; current documents reiterate the legacy vulnerability description without additional specifics.

CVE-2000-0097

The CVE-2000-0097 vulnerability concerns Microsoft IIS WebHits ISAPI Filter used with Microsoft Index Server. The OpenVAS Active Check entries reference MS00-06 and confirm that the WebHits filter allows remote attackers to read arbitrary files via crafted requests (Mal-formed Hit-Highlighting Ar...

CVE-2000-0098

CVE-2000-0098 describes a path-disclosure vulnerability in Microsoft Index Server/IIS WebHits: remote attackers can determine the real path of a web directory by requesting non-existent Internet Data Query files. OpenVAS notes the issue in MS00-006 (WebHits ISAPI filter) and IDA/IDQ path disclosu...

CVE-2000-0139

The CVE-2000-0139 entry concerns Internet Anywhere POP3 Mail Server where local users can trigger a denial of service through a malformed RETR command. The vulnerability is local in scope with a low base score (2.1) and partial availability impact; no explicit exploit details or mitigations are p...

CVE-2000-0145

The CVE-2000-0145 issue affects gnucash on Debian GNU/Linux via the libguile.so library installed with world-writable permissions. The root cause is a world-writable libguile.so, which could allow unauthorized modifications to the file. Impact is described as enabling modification of the library,...

CVE-2000-0149

Zeus Web Server (versions 3.1.x–3.3.5) contains an information disclosure flaw where a null byte (%00) at the end of a URL allows remote attackers to view the source code of CGI scripts. Root cause: improper handling of CGI input leading to source disclosure. Impact is information exposure of CGI...

CVE-2000-0150

Check Point FireWall-1 is affected by CVE-2000-0150, where the FTP PASV handling flaw in stateful inspection allows remote attackers to bypass FTP data-connection restrictions by causing the firewall to misinterpret crafted packets as a valid PASV response. The vulnerability stems from layering v...

CVE-2000-0152

CVE-2000-0152 concerns remote denial of service in Novell BorderManager 3.5 . According to the sources, a user can trigger a DoS by pressing the enter key over a telnet session to port 2000 . The NVD entry confirms the vulnerability exists and notes the impact as a partial loss of availability wi...

CVE-2000-0156

Technical details (affected products, vulnerable components, and exploit information) are not provided in the supplied documents. Monitor for updates.