CVE-2000-0583

CVE-2000-0583 affects the vpopmail package: the vchkpw program (versions prior to 4.8) fails to properly cleanse an untrusted format string in a syslog call, enabling remote users to trigger a denial of service by sending a USER or PASS command containing formatting directives. The remediation is...

CVE-2000-0532

Summary (CVE-2000-0532) : A FreeBSD patch for SSH on 2000-01-14 configures SSH to listen on port 722 as well as port 22, which might allow remote attackers to access SSH through port 722 even if port 22 is filtered. This is documented in multiple sources (NVD/CVE records). The available documents...

CVE-2000-0493

The CVE-2000-0493 entry describes a buffer overflow in the Simple Network Time Sync (SMTS) daemon that allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long string. No details on affected versions, vendor, or available fixes are provided in the co...

CVE-2000-0470

Allegro RomPager HTTP server allows remote attackers to cause a denial of service via a malformed authentication request...

CVE-2000-0511

CVE-2000-0511 concerns CUPS (Common Unix Printing System) 1.04 and earlier, where a remote attacker can cause a denial of service by sending a CGI POST request. The vulnerability affects the CUPS CGI handling path and is described as a remote DoS with no confidentiality or integrity impact, and p...

CVE-2000-0751

The CVE-2000-0751 issue concerns mopd (Maintenance Operations Protocol loader daemon) that fails to properly cleanse user-supplied format strings, enabling remote attackers to execute arbitrary commands. The vulnerability is described as a format-string vulnerability in mopd, with potential for a...

CVE-2000-0521

Savant web server allows remote attackers to read source code of CGI scripts via a GET request that does not include the HTTP version number...

CVE-2000-0594

CVE-2000-0594 affects the BitchX IRC client. The vulnerability arises from improper cleansing of an untrusted format string in the /INVITE command, allowing a remote attacker to trigger a denial of service by inviting a channel whose name includes special formatting characters. Connected document...

CVE-2000-0273

Technical details about CVE-2000-0273 are not publicly available in the provided documents. Monitor for updates.

CVE-2000-0780

The CVE-2000-0780 entry concerns the IPSWITCH IMail web server (versions 6.04 and earlier) vulnerable to a directory-traversal (dot-dot) attack that allows remote attackers to read and delete arbitrary files. The vulnerability is described as affecting the web server component, with impact descri...

CVE-2000-0613

Summary: CVE-2000-0613 affects Cisco Secure PIX Firewall, where the device does not properly identify forged TCP Reset (RST) packets. This can allow a remote attacker to disrupt legitimate connections established through the firewall, effectively impacting availability. Root cause / Details from ...

CVE-2000-0521

Savant web server vulnerability CVE-2000-0521 allows remote disclosure of CGI source by requesting the original CGI form. The OpenVAS NASL description: “Savant original form CGI access” states that attackers can download the unprocessed CGI, exposing sensitive information stored inside those scri...

CVE-2000-0344

The CVE-2000-0344 entry affects the knfsd NFS server in Linux kernel 2.2.x. The vulnerability is a denial of service triggered by a negative size value, exploitable by remote attackers. The available sources confirm the affected component and the impact (denial of service) but do not provide expl...

/doc/packages Directory Browsable (deprecated)

The /doc/packages directory is browsable. This directory contains the versions of the packages installed on this host. A remote attacker can use this information to mount further attacks. This plugin has been deprecated. Webmirror3 plugin ID 10662 will identify a browsable directory. %NASLMINLEVE...

CVE-2000-0784

The CVE concerns the Rapidstream 2.1 Beta VPN appliance where the sshd daemon contains a hard-coded rsadmin account with a null password. This effectively allows remote attackers to authenticate without credentials and execute arbitrary commands via SSH, giving full compromise potential to the de...

CVE-2000-0775

The CVE concerns RobTex Viking server before version 1.06-370, where a buffer overflow in the HTTP request handling (long GET requests and long If-Modified-Since/If-Range headers) allows remote attackers to cause denial of service or execute arbitrary commands. The vulnerability is triggered by o...

CVE-2000-0710

The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to determine the physical path of the server components by requesting an invalid URL whose name includes a standard DOS device name...

CVE-2000-0626

Alibaba Web Server 2.0 is affected by a buffer overflow in HTTP request handling (notably via long GET/POST requests), enabling remote attackers to cause denial of service. The NASL entry additionally indicates potential arbitrary code execution through crafted requests, suggesting a broader impa...

CVE-2000-0659

The CVE-2000-0659 entry describes a buffer overflow in AnalogX proxy server (versions 4.04 and earlier) that allows remote attackers to cause a denial of service via a long user ID in a SOCKS4 CONNECT request. Affected software is the AnalogX proxy server; the root cause is a buffer overflow trig...

CVE-2000-0658

CVE-2000-0658 concerns AnalogX Proxy Server (versions up to 4.04) where a buffer overflow in the POP3 USER command handling can cause denial of service. The affected component is the server’s POP3 USER command path; root cause is a buffer overflow when processing a long USER input. Impact as stat...