CVE-2000-0923

CVE-2000-0923 concerns the authenticate.cgi CGI in Aplio PRO, where remote attackers can execute arbitrary commands by injecting shell metacharacters into the password parameter. The entry lists a CVSS v2 base score of 7.5 (HIGH) with network access, low attack complexity, and no authentication. ...

CVE-2000-0255

The CVE-2000-0255 entry affects the Nbase-Xyplex EdgeBlaster router. The vulnerability arises when an attacker performs a scan for the FormMail CGI program, which can cause a denial of service. Documented impact is network-based, with availability impact described as PARTIAL. The provided sources...

CVE-2000-1049

CVE-2000-1049 affects Allaire JRun 3.0 HTTP servlet server. The vulnerability allows remote denial of service when a URL containing a long sequence of "." characters is processed. The available sources describe the impact as a DoS, but do not provide concrete exploitation details, affected versio...

CVE-2000-1097

The CVE-2000-1097 issue affects the SonicWALL SOHO firewall web server, where remote attackers can cause a denial of service by sending a long username in the authentication page. The connected SonicWall advisory (SNWLID-2000-0001) confirms the same description and highlights the vulnerability, b...

CVE-2000-1003

CVE-2000-1003 (Windows 95/98 NETBIOS client) : The NETBIOS client in Windows 95 and Windows 98 is affected. A remote attacker over a network can cause a denial of service by altering a file sharing service to return an unknown driver type, which crashes the client. Root cause described as the fil...

CVE-2000-0941

The CVE-2000-0941 entry concerns the KW Whois CGI script (KW Web) version 1.0, which fails to filter shell metacharacters in the 'whois' parameter. This allows an unauthenticated, remote attacker to execute arbitrary commands with the privileges of the http daemon. The vulnerability is demonstrat...

CVE-2001-1464

Crystal Reports, when displaying data for a password protected database using HTML pages, embeds the username and password in cleartext in the HTML page and the URL, which allows remote attackers to obtain passwords...

CVE-2000-1110

CVE-2000-1110 affects the IBM Net.Data db2www package: the document.d2w CGI program can be probed to reveal the web server’s physical path when a nonexistent command is sent. This is a path disclosure weakness, with partial impact on confidentiality reported (base score 5.0, MITRE ATT&CK not spec...

CVE-2000-1126

CVE-2000-1126 affects HP-UX 11.00 and earlier. The vulnerability is in the auto_parms and set_parms components and, per the sources, allows remote attackers to execute arbitrary commands or cause a denial of service. The connected documents confirm the affected software and the underlying impact ...

CVE-2000-1039

CVE-2000-1039 (Naptha) describes DoS in various TCP/IP stacks and network apps where remote attackers flood a target with TCP connection attempts and complete the TCP handshake without maintaining state, exhausting resources and causing partial availability impact. Connected documents confirm the...

CVE-2000-1186

CVE-2000-1186 describes a buffer overflow in the phf CGI program that allows remote command execution by supplying a large number of arguments and a long MIME header. The NVD entry lists a-network attack vector, low complexity, no authentication, and partial CIA impact with a base score of 7.5 (H...

CVE-2000-1168

CVE-2000-1168 affects IBM HTTP Server 1.3.6 (based on Apache). The vulnerability allows remote attackers to cause a denial of service and may lead to arbitrary command execution through a long GET request. The associated NVD entry lists a base score of 7.5 (High; Network vector, low attack comple...

CVE-2000-1116

CVE-2000-1116 affects TransSoft Broker FTP Server prior to 4.3.0.1. A buffer overflow caused by a long command can lead to remote denial of service and may allow arbitrary command execution. The provided documents specify the issue and affected version but do not include exploitation details or a...

CVE-2000-1070

pollit.cgi in Poll It 2.01 and earlier uses data files that are located under the web document root, which allows remote attackers to access sensitive or private information...

CVE-2000-1079

Affected software/hardware: Microsoft Windows 95, 98, NT, and 2000. Vulnerability: Interaction between the CIFS Browser Protocol and NetBIOS allows remote modification of dynamic NetBIOS name cache entries via a spoofed Browse Frame Request carried in a unicast or UDP broadcast datagram. Impact: ...

CVE-2000-1035

CVE-2000-1035 concerns buffer overflows in TYPSoft FTP Server 0.78 and earlier. A long USER, PASS, or CWD command can allow remote attackers to cause a denial of service and potentially execute arbitrary commands. Affected product: TYPSoft FTP Server (versions up to 0.78); root cause: buffer over...

CVE-2000-1033

Serv-U FTP Server allows remote attackers to bypass its anti-hammering feature by first logging on as a valid user possibly anonymous and then attempting to guess the passwords of other users...

CVE-2000-0845

CVE-2000-0845 affects Digital Unix 4.0F: the kdebugd daemon allows remote attackers to read arbitrary files by specifying the full path in the initialization packet. Exploitation status and remediation details are not provided in the supplied documents.

CVE-2000-0513

CUPS Common Unix Printing System 1.04 and earlier allows remote attackers to cause a denial of service by authenticating with a user name that does not exist or does not have a shadow password...

CVE-1999-0788

CVE-1999-0788 affects Arkiea nlservd and allows remote attackers to cause a denial of service. The provided documents confirm the vulnerability and its impact, but do not specify affected versions, root cause details, or a remediation/fix. No exploitation status is stated in the sources.