CVE-2000-0493

The CVE-2000-0493 entry describes a buffer overflow in the Simple Network Time Sync (SMTS) daemon that allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long string. No details on affected versions, vendor, or available fixes are provided in the co...

CVE-2000-0273

Technical details about CVE-2000-0273 are not publicly available in the provided documents. Monitor for updates.

CVE-2000-0583

CVE-2000-0583 affects the vpopmail package: the vchkpw program (versions prior to 4.8) fails to properly cleanse an untrusted format string in a syslog call, enabling remote users to trigger a denial of service by sending a USER or PASS command containing formatting directives. The remediation is...

CVE-2000-0521

Savant web server vulnerability CVE-2000-0521 allows remote disclosure of CGI source by requesting the original CGI form. The OpenVAS NASL description: “Savant original form CGI access” states that attackers can download the unprocessed CGI, exposing sensitive information stored inside those scri...

CVE-2000-0521

Savant web server allows remote attackers to read source code of CGI scripts via a GET request that does not include the HTTP version number...

CVE-2000-0513

CUPS Common Unix Printing System 1.04 and earlier allows remote attackers to cause a denial of service by authenticating with a user name that does not exist or does not have a shadow password...

CVE-2000-0594

CVE-2000-0594 affects the BitchX IRC client. The vulnerability arises from improper cleansing of an untrusted format string in the /INVITE command, allowing a remote attacker to trigger a denial of service by inviting a channel whose name includes special formatting characters. Connected document...

CVE-2000-0780

The CVE-2000-0780 entry concerns the IPSWITCH IMail web server (versions 6.04 and earlier) vulnerable to a directory-traversal (dot-dot) attack that allows remote attackers to read and delete arbitrary files. The vulnerability is described as affecting the web server component, with impact descri...

CVE-2000-0532

Summary (CVE-2000-0532) : A FreeBSD patch for SSH on 2000-01-14 configures SSH to listen on port 722 as well as port 22, which might allow remote attackers to access SSH through port 722 even if port 22 is filtered. This is documented in multiple sources (NVD/CVE records). The available documents...

/doc/packages Directory Browsable (deprecated)

The /doc/packages directory is browsable. This directory contains the versions of the packages installed on this host. A remote attacker can use this information to mount further attacks. This plugin has been deprecated. Webmirror3 plugin ID 10662 will identify a browsable directory. %NASLMINLEVE...

CVE-2000-0775

The CVE concerns RobTex Viking server before version 1.06-370, where a buffer overflow in the HTTP request handling (long GET requests and long If-Modified-Since/If-Range headers) allows remote attackers to cause denial of service or execute arbitrary commands. The vulnerability is triggered by o...

CVE-2000-0710

The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to determine the physical path of the server components by requesting an invalid URL whose name includes a standard DOS device name...

CVE-2000-0784

The CVE concerns the Rapidstream 2.1 Beta VPN appliance where the sshd daemon contains a hard-coded rsadmin account with a null password. This effectively allows remote attackers to authenticate without credentials and execute arbitrary commands via SSH, giving full compromise potential to the de...

CVE-2000-0659

The CVE-2000-0659 entry describes a buffer overflow in AnalogX proxy server (versions 4.04 and earlier) that allows remote attackers to cause a denial of service via a long user ID in a SOCKS4 CONNECT request. Affected software is the AnalogX proxy server; the root cause is a buffer overflow trig...

CVE-2000-0626

Alibaba Web Server 2.0 is affected by a buffer overflow in HTTP request handling (notably via long GET/POST requests), enabling remote attackers to cause denial of service. The NASL entry additionally indicates potential arbitrary code execution through crafted requests, suggesting a broader impa...

CVE-2000-0658

CVE-2000-0658 concerns AnalogX Proxy Server (versions up to 4.04) where a buffer overflow in the POP3 USER command handling can cause denial of service. The affected component is the server’s POP3 USER command path; root cause is a buffer overflow when processing a long USER input. Impact as stat...

CVE-2000-0652

IBM WebSphere allows remote attackers to read source code for executable web files by directly calling the default InvokerServlet using a URL which contains the "/servlet/file" string...

CVE-2000-0359

thttpd (Trivial HTTP) prior to version 2.05 is affected by a remote buffer overflow triggered by a long If-Modified-Since header. The CVE-2000-0359 entry indicates an overflow that can allow remote code execution or denial of service. Public details in connected documents specify the vulnerable c...

CVE-2000-0509

CVE-2000-0509 affects Sambar Server 4.3, specifically the finger and whois demonstration scripts. A buffer overflow triggered by a long hostname allows remote attackers to execute arbitrary commands. The connected documents do not provide a patch/version fix; no exploitation details are listed. T...

CVE-2000-0405

The CVE-2000-0405 entry affects L0pht AntiSniff and describes a buffer overflow in the way it handles DNS responses. A malformed DNS response packet could allow remote attackers to execute arbitrary commands on the affected system. The root cause is the overflow in the DNS-response processing pat...