CVE-2000-0176

The CVE-2000-0176 entry applies to Serv-U 2.5d and earlier, where the default configuration allows remote attackers to reveal the server’s real directory path by requesting a URL for a non-existent file/directory (path disclosure). Related connected sources also note potential additional issues i...

CVE-2000-0177

CVE-2000-0177 concerns DNSTools CGI applications where remote attackers can execute arbitrary commands due to shell metacharacters. The issue is described across NVD and CVE records as enabling complete compromise (C, I, A) with network access and no authentication, yielding a very high risk (CVS...

CVE-2000-0187

EZShopper 3.0 contains directory traversal in loadpage.cgi (and related scripts per Nessus data) that allows remote attackers to read arbitrary files via .. traversal and may permit command execution via shell metacharacters. Affected component is EZShopper’s web CGI handling; root cause is impro...

CVE-2000-0188

EZShopper 3.0’s search.cgi is vulnerable to directory traversal and command injection. Remote attackers can read arbitrary files via a .. path and may execute shell commands through metacharacters. The Nessus entry also mentions directory traversal in loadpage.cgi and possible arbitrary command e...

CVE-2000-0197

The CVE-2000-0197 entry describes a local privilege escalation in Windows NT where the scheduler uses the drive mapping of the currently logged-in interactive user. A local attacker could gain privileges by placing a Trojan horse batch file in place of the original batch file, enabling execution ...

CVE-2000-0198

CVE-2000-0198 affects the MERCUR mail server suite’s POP3 and IMAP servers. The issue is a buffer overflow that allows remote attackers to cause a denial of service. The public documents cite a base severity of MEDIUM (CVSS v2.0: AV:N/AC:L/Au:N/C:N/I:N/A:P) with a network attack vector and no aut...

CVE-2000-0199

CVE-2000-0199 affects Microsoft SQL Server 7.0 via Enterprise Manager when the “Always prompt for login name and password” option is not set; the login credentials are stored with weak encryption. The connected Nessus entry also describes a potential local privilege escalation by authenticated us...

CVE-2000-0205

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2000-0213

The Sambar server is affected by CVE-2000-0213 due to batch files in the CGI directory (hello.bat and echo.bat) that allow remote attackers to execute commands via shell metacharacters. The Nessus plugin confirms these scripts enable arbitrary code execution with the web server’s privileges, iden...

CVE-2000-0214

CVE-2000-0214 : The incident is tied to FTP Explorer, which stores usernames, passwords, and FTP site profiles using weak encryption. The available data describe the vulnerability as a local issue with partial confidentiality and integrity impact, and a base severity of MEDIUM (score 4.6). No exp...

CVE-2000-0216

Affected software: Microsoft email clients (Outlook, Exchange, Windows Messaging). Vulnerability: servers/clients automatically respond to Read Receipt and Delivery Receipt tags. Root cause: auto-generated responses to receipt requests, enabling amplification by redirecting to a large distributio...

CVE-2000-0219

Red Hat 6.0 is affected: local root escalation via booting into single-user mode and interrupting at the password prompt. The Nessus entry notes the attacker with physical access can gain root via LILO/GRUB boot menus. Remediation guidance in the provided docs is limited; consider disabling or pr...

CVE-2000-0220

ZoneAlarm is reported to send sensitive system and network information in cleartext to the Zone Labs server when a user requests more information about an event. The PT-2000-1202 entry attributes the vulnerability to ZoneAlarm (affected versions not specified) and reiterates that the issue involv...

CVE-2000-0003

Buffer overflow in UnixWare rtpm program allows local users to gain privileges via a long environmental variable...

CVE-2000-0022

Lotus Domino HTTP server does not properly disable anonymous access for the cgi-bin directory...

CVE-2000-0031

The initscripts package in Red Hat Linux allows local users to gain privileges via a symlink attack...

CVE-2000-0037

Majordomo wrapper allows local users to gain privileges by specifying an alternate configuration file...

CVE-2000-0041

Macintosh systems generate large ICMP datagrams in response to malformed datagrams, allowing them to be used as amplifiers in a flood attack...

CVE-2000-0098

Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file that does not exist...

CVE-2000-0121

The Recycle Bin utility in Windows NT and Windows 2000 allows local users to read or modify files by creating a subdirectory with the victim's SID in the recycler directory, aka the "Recycle Bin Creation" vulnerability...