5905 matches found
CVE-2000-1104
CVE-2000-1104 is a variant of the IIS Cross-Site Scripting vulnerability described in MS00-060 (CVE-2000-0746). The vulnerability affects Microsoft IIS 4.0 and 5.0, where a malicious site can embed scripts in a link to a trusted site, which are returned unquoted in an error message and executed i...
CVE-2000-0999
Technical details about CVE-2000-0999 are not provided in the connected documents. The initial description mentions format-string vulnerabilities in OpenBSD ssh but no affected versions, impact specifics, or remediation are given here. Monitor for updates.
CVE-2000-0176
The CVE-2000-0176 entry applies to Serv-U 2.5d and earlier, where the default configuration allows remote attackers to reveal the server’s real directory path by requesting a URL for a non-existent file/directory (path disclosure). Related connected sources also note potential additional issues i...
CVE-1999-0618
CVE-1999-0618 relates to the rexec/rexecd service being active. The provided sources identify rexecd as vulnerable due to weak authentication, enabling remote command execution with high impact (C/C/I/A = complete) and a CVSS v2 base score of 10.0 (network vector, low attack complexity, no auth)....