CVE-2000-0161

Sample web sites on Microsoft Site Server 3.0 Commerce Edition do not validate an identification number, which allows remote attackers to execute SQL commands...

win2k.install.txt

Hi ! During the installation process of Windows 2000 professionnal anyone can connect to the ADMIN$ share as ADMINISTRATOR whithout any password. Verification : % ./smbclient \\WINDOZE\ADMIN$ -I xxx.yyy.zzz.ttt -U 'administrator' -d 0 -N Unable to open configuration file...

CVE-2000-0159

HP Ignite-UX does not save /etc/passwd when it creates an image of a trusted system, which can set the password field to a blank and allow an attacker to gain privileges...

CVE-2000-0142

Summary: Timbuktu Pro 2.0b650 contains a vulnerability in its authentication protocol that lets remote attackers cause a denial of service by connecting to ports 407 and 1417. What’s affected: Timbuktu Pro, version 2.0b650; vulnerability relates to the authentication mechanism and affects availab...

CVE-2000-0143

Technical details for CVE-2000-0143 are not provided in the connected documents. The initial description notes local TCP redirection via sshd, but no vendor/versions/impact or fixes are specified beyond that. Monitor for updates.

CVE-2000-0147

The CVE-2000-0147 issue affects snmpd on SCO OpenServer, where the SNMP community string is writable by default. This enables local attackers to modify the host’s configuration. Connected sources corroborate the default-write vulnerability but do not provide a patch or explicit remediation details.

CVE-2000-0151

CVE-2000-0151 : GNU make reads a Makefile from stdin and follows symlinks, enabling other local users to execute commands. This is a local impact issue with high complexity to exploit; CVSS data shows local access, complete confidentiality/integrity/availability impact. The provided documents do ...

CVE-2000-0151

GNU make follows symlinks when it reads a Makefile from stdin, which allows other local users to execute commands...

CVE-2000-0094

procfs in BSD systems allows local users to gain root privileges by modifying the /proc/pid/mem interface via a modified file descriptor for stderr...

CVE-2000-0154

The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack...

CVE-2000-0138

CVE-2000-0138 is associated with systems infected by DDoS control tools (master/agent/zombie) such as Trinoo, TFN/TFN2K, stacheldraht, mstream, and shaft. The Connected documents show multiple Nessus plugin detections (e.g., Trinity v3, mstream, Shaft, Trin00) reporting a compromised host running...

CVE-2000-0167

IIS Inetinfo.exe allows local users to cause a denial of service by creating a mail file with a long name and a .txt.eml extension in the pickup directory...

CVE-2000-0222

The installation for Windows 2000 does not activate the Administrator password until the system has rebooted, which allows remote attackers to connect to the ADMIN$ share without a password until the reboot occurs...

CVE-2000-0224

ARCserve agent in SCO UnixWare 7.x allows local attackers to gain root privileges via a symlink attack...

CVE-2000-0138: Undefined Security Weakness

A system has a distributed denial of service DDOS attack master, agent, or zombie installed, such as 1 Trinoo, 2 Tribe Flood Network TFN, 3 Tribe Flood Network 2000 TFN2K, 4 stacheldraht, 5 mstream, or 6 shaft...

CVE-2000-0150

Check Point Firewall-1 allows remote attackers to bypass port access restrictions on an FTP server by forcing it to send malicious packets that Firewall-1 misinterprets as a valid 227 response to a client's PASV attempt...

CVE-2000-0142

The authentication protocol in Timbuktu Pro 2.0b650 allows remote attackers to cause a denial of service via connections to port 407 and 1417...

CVE-2000-0140

Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service via a large number of connections...

Novell BorderManager Port 2000 Telnet DoS

The port 2000 is open, and Novell BorderManager might be listening on it. There is a denial of service attack that allows an intruder to make a Novell BorderManager 3.5 slowly die. If you see an error message on this computer telling you 'Short Term Memory Allocator is out of Memory' then you are...

CVE-2000-0093

The CVE-2000-0093 entry concerns Red Hat installations that use DES-encrypted passwords via crypt() for the initial password instead of MD5. Affected component is the initial password handling in Red Hat setups; root cause is the use of DES crypt() rather than a stronger hash. Documents explicitl...