CVE-2000-0652

IBM WebSphere allows remote attackers to read source code for executable web files by directly calling the default InvokerServlet using a URL which contains the "/servlet/file" string...

CVE-2000-0419

The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthorized activities via the "Show Me" function in Office Help, aka the "Office 2000 UA Control" vulnerability...

CVE-2000-0359

thttpd (Trivial HTTP) prior to version 2.05 is affected by a remote buffer overflow triggered by a long If-Modified-Since header. The CVE-2000-0359 entry indicates an overflow that can allow remote code execution or denial of service. Public details in connected documents specify the vulnerable c...

CVE-2000-0405

The CVE-2000-0405 entry affects L0pht AntiSniff and describes a buffer overflow in the way it handles DNS responses. A malformed DNS response packet could allow remote attackers to execute arbitrary commands on the affected system. The root cause is the overflow in the DNS-response processing pat...

CVE-2000-0411

CVE-2000-0411 concerns Matt Wright’s FormMail CGI script. The vulnerability allows remote attackers to obtain environmental variables via the env_report parameter, potentially exposing sensitive system information. Connected PT-2000-1353 notes affected versions are not specified and provides no f...

CVE-2000-0509

CVE-2000-0509 affects Sambar Server 4.3, specifically the finger and whois demonstration scripts. A buffer overflow triggered by a long hostname allows remote attackers to execute arbitrary commands. The connected documents do not provide a patch/version fix; no exploitation details are listed. T...

CVE-2000-0669

Novell NetWare 5.0 allows remote attackers to cause a denial of service by flooding port 40193 with random data...

CVE-2000-0384

NetStructure 7110 and 7180 are affected by an authentication issue due to undocumented accounts (servnow, root, wizard) whose passwords can be inferred from the device MAC address. Remote attackers could gain root access. The description in the CVE matches the vendor-agnostic details: a hard-to-j...

3R Soft MailStudio 2000 2.0 - Arbitrary File Access

3R Soft MailStudio 2000 2.0 - Arbitrary File Access source: https://www.securityfocus.com/bid/1335/info MailStudio 2000 is vulnerable to multiple attacks. It is possible for a remote user to gain read access to all files located on the server via the usage of the "/.." string passed to a CGI,...

CVE-2000-0482

Check Point Firewall-1 allows remote attackers to cause a denial of service by sending a large number of malformed fragmented IP packets...

CVE-1999-0031

JavaScript in Internet Explorer 3.x and 4.x, and Netscape 2.x, 3.x and 4.x, allows remote attackers to monitor a user's web activities, aka the Bell Labs vulnerability...

CVE-2000-0004

ZBServer Pro (CVE-2000-0004) exposes a partial confidentiality impact by allowing remote attackers to read source code of executable files when a dot is inserted into the URL. This is a network-accessible issue with low attack complexity and no authentication required, aligning with a CVSS v2 bas...

CVE-2000-0328

CVE-2000-0328 refers to Windows NT 4.0 where TCP initial sequence numbers (ISNs) are generated predictably, enabling spoofing or hijacking of TCP sessions. Connected sources expand the scope to note that several TCP/IP stacks have been observed with weak ISN generation and that attacks can disrup...

CVE-2000-0113

The SyGate Remote Management program does not properly restrict access to its administration service, which allows remote attackers to cause a denial of service, or access network traffic statistics...

CVE-2000-0268

Cisco IOS 11.x/12.x contains a vulnerability where sending the ENVIRON option to the Telnet daemon before it is ready can trigger a reboot, causing a remote denial-of-service. Affected software is Cisco IOS, with a DoS impact described as a system reboot when the ENVIRON Telnet option is processe...

CVE-2000-0258

CVE-2000-0258 affects IIS 4.0 and 5.0. The provided documents describe a remote denial-of-service vulnerability triggered by sending many URLs containing a large number of escaped characters, referred to as the "Myriad Escaped Characters" vulnerability. The NVD entry provides CVSS scores (2.0: 5....

CVE-2000-0490

Buffer overflow in the NetWin DSMTP 2.7q in the NetWin dmail package allows remote attackers to execute arbitrary commands via a long ETRN request...

CVE-2000-0358

CVE-2000-0358 affects ORBit and gnome-session in Red Hat Linux 6.1, where remote attackers can cause a crash in a program. The available descriptions consistently state vulnerability to crash without detailing exploit vectors, affected versions beyond Red Hat Linux 6.1, or concrete remediation st...

CVE-2000-0326

Meeting Maker uses weak encryption a polyalphabetic substitution cipher for passwords, which allows remote attackers to sniff and decrypt passwords for Meeting Maker accounts...

CVE-2000-0192

The CVE-2000-0192 issue affects the default installation of Caldera OpenLinux 2.3 via the rpm_query CGI, which allows remote attackers to enumerate installed RPMs by accessing the CGI over the web server. This leads to information disclosure about installed services and versions (partial confiden...