Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2000-0459
IMP does not remove files properly if the MSWordView application quits, which allows local users to cause a denial of service by filling up the disk space by requesting a large number of documents and prematurely stopping the request.
Affected Products: n/a
References: [{'name': '1361', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1361'}, {'name': '20000424 Two Problems in IMP 2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=95672120116627&w=2'}]
CVE State: PUBLISHED
Explain CVE-2000-0460
Buffer overflow in KDE kdesud on Linux allows local uses to gain privileges via a long DISPLAY environmental variable.
Affected Products: n/a
References: [{'name': '1274', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1274'}, {'name': '20000526 KDE: /usr/bin/kdesud, gid = 0 exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-05/0353.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0461
The undocumented semconfig system call in BSD freezes the state of semaphores, which allows local users to cause a denial of service of the semaphore system by using the semconfig call.
Affected Products: n/a
References: [{'name': '20000526', 'tags': ['vendor-advisory', 'x_refsource_OPENBSD'], 'url': 'http://www.openbsd.org/errata26.html#semconfig'}, {'name': 'NetBSD-SA2000-004', 'tags': ['vendor-advisory', 'x_refsource_NETBSD'], 'url': 'ftp://ftp.netbsd.org/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-004.txt.asc'}, {'name': '1270', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1270'}, {'name': 'FreeBSD-SA-00:19', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:19.semconfig.asc'}]
CVE State: PUBLISHED
Explain CVE-2000-0462
ftpd in NetBSD 1.4.2 does not properly parse entries in /etc/ftpchroot and does not chroot the specified users, which allows those users to access other files outside of their home directory.
Affected Products: n/a
References: [{'name': '1366', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1366'}, {'name': 'NetBSD-SA2000-006', 'tags': ['vendor-advisory', 'x_refsource_NETBSD'], 'url': 'ftp://ftp.netbsd.org/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-006.txt.asc'}, {'name': '1273', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1273'}]
CVE State: PUBLISHED
Explain CVE-2000-0463
BeOS 5.0 allows remote attackers to cause a denial of service via fragmented TCP packets.
Affected Products: n/a
References: [{'name': '1222', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1222'}, {'name': '20000517 AUX Security Advisory on Be/OS 5.0 (DoS)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-05/0197.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0464
Internet Explorer 4.x and 5.x allows remote attackers to execute arbitrary commands via a buffer overflow in the ActiveX parameter parsing capability, aka the "Malformed Component Attribute" vulnerability.
Affected Products: n/a
References: [{'name': '1223', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1223'}, {'name': 'MS00-033', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-033'}, {'name': 'Q261257', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://www.microsoft.com/technet/support/kb.asp?ID=261257'}]
CVE State: PUBLISHED
Explain CVE-2000-0465
Internet Explorer 4.x and 5.x does not properly verify the domain of a  frame within a browser window, which allows a remote attacker to read client files via the frame, aka the "Frame Domain Verification" vulnerability.
Affected Products: n/a
References: [{'name': 'Q251108', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://www.microsoft.com/technet/support/kb.asp?ID=251108'}, {'name': '1224', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1224'}, {'name': 'MS00-033', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-033'}, {'name': 'Q255676', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://www.microsoft.com/technet/support/kb.asp?ID=255676'}]
CVE State: PUBLISHED
Explain CVE-2000-0466
AIX cdmount allows local users to gain root privileges via shell metacharacters.
Affected Products: n/a
References: [{'name': '1384', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1384'}, {'name': '20000620 Insecure call of external program in AIX cdmount', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://xforce.iss.net/alerts/advise55.php'}]
CVE State: PUBLISHED
Explain CVE-2000-0467
Buffer overflow in Linux splitvt 1.6.3 and earlier allows local users to gain root privileges via a long password in the screen locking function.
Affected Products: n/a
References: [{'name': '1346', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1346'}, {'name': '20000614 Splitvt exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-06/0125.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0468
man in HP-UX 10.20 and 11 allows local attackers to overwrite files via a symlink attack.
Affected Products: n/a
References: [{'name': '20000601 HP Security vulnerability in the man command', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.SOL.4.02.10006021014400.4779-100000%40nofud.nwest.attws.com'}, {'name': '1302', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1302'}]
CVE State: PUBLISHED
Explain CVE-2000-0469
Selena Sol WebBanner 4.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Affected Products: n/a
References: [{'name': "20000620 Re: CGI: Selena Sol's WebBanner ( Random Banner Generator ) Vulnerability", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=4.2.0.58.20000620193604.00979950%40mail.clark.net'}, {'name': '1347', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1347'}, {'name': "20000613 CGI: Selena Sol's WebBanner ( Random Banner Generator ) Vulnerability", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-06-22&msg=ILENKALMCAFBLHBGEOFKGEJCCAAA.jwesterink%40jwesterink.daxis.nl'}]
CVE State: PUBLISHED
Explain CVE-2000-0470
Allegro RomPager HTTP server allows remote attackers to cause a denial of service via a malformed authentication request.
Affected Products: n/a
References: [{'name': '1290', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1290'}, {'name': '20000601 Hardware Exploit - Gets network Down', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-05/0398.html'}, {'name': 'rompager-malformed-dos(4588)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4588'}]
CVE State: PUBLISHED
Explain CVE-2000-0471
Buffer overflow in ufsrestore in Solaris 8 and earlier allows local users to gain root privileges via a long pathname.
Affected Products: n/a
References: [{'name': '1348', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1348'}, {'name': 'sol-ufsrestore-bo(4711)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4711'}, {'name': '20000614 Vulnerability in Solaris ufsrestore', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-06/0114.html'}, {'name': '00210', 'tags': ['vendor-advisory', 'x_refsource_SUN'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/210'}, {'name': '1398', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1398'}, {'name': 'VU#36866', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/36866'}]
CVE State: PUBLISHED
Explain CVE-2000-0472
Buffer overflow in innd 2.2.2 allows remote attackers to execute arbitrary commands via a cancel request containing a long message ID.
Affected Products: n/a
References: [{'name': '20000106 innd 2.2.2 remote buffer overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-06/0003.html'}, {'name': '20000707 inn update', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-07/0097.html'}, {'name': 'innd-cancel-overflow(4615)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4615'}, {'name': 'CSSA-2000-016.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-2000-016.0.txt'}, {'name': '20000721 [ANNOUNCE] INN 2.2.3 available', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-07/0298.html'}, {'name': '20000722 MDKSA-2000:023 inn update', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-07/0330.html'}, {'name': '1316', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1316'}]
CVE State: PUBLISHED
Explain CVE-2000-0473
Buffer overflow in AnalogX SimpleServer 1.05 allows a remote attacker to cause a denial of service via a long GET request for a program in the cgi-bin directory.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.analogx.com/contents/download/network/sswww.htm'}, {'name': '1349', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1349'}]
CVE State: PUBLISHED
Explain CVE-2000-0474
Real Networks RealServer 7.x allows remote attackers to cause a denial of service via a malformed request for a page in the viewsource directory.
Affected Products: n/a
References: [{'name': '20000601 Remote DoS attack in RealServer: USSR-2000043', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-05/0427.html'}, {'name': 'realserver-malformed-remote-dos(4587)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4587'}, {'name': '1288', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1288'}, {'name': '20000601 Remote DoS attack in Real Networks Real Server (Strike #2) Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-05/0410.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0475
Windows 2000 allows a local user process to access another user's desktop within the same windows station, aka the "Desktop Separation" vulnerability.
Affected Products: n/a
References: [{'name': '1350', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1350'}, {'name': 'win2k-desktop-separation(4714)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4714'}, {'name': 'MS00-020', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-020'}]
CVE State: PUBLISHED
Explain CVE-2000-0476
xterm, Eterm, and rxvt allow an attacker to cause a denial of service by embedding certain escape characters which force the window to be resized.
Affected Products: n/a
References: [{'name': '20000601 Re: [rootshell.com] Xterm DoS Attack', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-05/0420.html'}, {'name': '20000601 [rootshell.com] Xterm DoS Attack', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-05/0409.html'}, {'name': '1298', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1298'}]
CVE State: PUBLISHED
Explain CVE-2000-0477
Buffer overflow in Norton Antivirus for Exchange (NavExchange) allows remote attackers to cause a denial of service via a .zip file that contains long file names.
Affected Products: n/a
References: [{'name': 'antivirus-nav-zip-bo(4710)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4710'}, {'name': '20000614 Vulnerabilities in Norton Antivirus for Exchange', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-06/0136.html'}, {'name': '1351', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1351'}]
CVE State: PUBLISHED
Explain CVE-2000-0478
In some cases, Norton Antivirus for Exchange (NavExchange) enters a "fail-open" state which allows viruses to pass through the server.
Affected Products: n/a
References: [{'name': 'antivirus-nav-fail-open(4709)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4709'}, {'name': '6266', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6266'}, {'name': '20000614 Vulnerabilities in Norton Antivirus for Exchange', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-06/0136.html'}, {'name': '1351', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1351'}]
CVE State: PUBLISHED
Explain CVE-2000-0479
Dragon FTP server allows remote attackers to cause a denial of service via a long USER command.
Affected Products: n/a
References: [{'name': '1352', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1352'}, {'name': '20000616 Multiples Remotes DoS Attacks in Dragon Server v1.00 and v2.00', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=96113734714517&w=2'}]
CVE State: PUBLISHED
Explain CVE-2000-0480
Dragon telnet server allows remote attackers to cause a denial of service via a long username.
Affected Products: n/a
References: [{'name': '1352', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1352'}, {'name': '20000616 Multiples Remotes DoS Attacks in Dragon Server v1.00 and v2.00', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=96113734714517&w=2'}]
CVE State: PUBLISHED
Explain CVE-2000-0481
Buffer overflow in KDE Kmail allows a remote attacker to cause a denial of service via an attachment with a long file name.
Affected Products: n/a
References: [{'name': 'kde-kmail-attachment-dos(4993)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4993'}, {'name': '20000601 Kmail heap overflow', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://securityfocus.com/templates/archive.pike?list=82&date=2000-06-22&msg=00060200422401.01667%40lez'}, {'name': '1380', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1380'}]
CVE State: PUBLISHED
Explain CVE-2000-0482
Check Point Firewall-1 allows remote attackers to cause a denial of service by sending a large number of malformed fragmented IP packets.
Affected Products: n/a
References: [{'name': '20000605 FW-1 IP Fragmentation Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-05/0473.html'}, {'name': 'fw1-packet-fragment-dos(4609)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4609'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.checkpoint.com/techsupport/alerts/list_vun.html#IP_Fragmentation'}, {'name': '1312', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1312'}, {'name': '1379', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1379'}]
CVE State: PUBLISHED
Explain CVE-2000-0483
The DocumentTemplate package in Zope 2.2 and earlier allows a remote attacker to modify DTMLDocuments or DTMLMethods without authorization.
Affected Products: n/a
References: [{'name': '20000615 [Brian@digicool.com: [Zope] Zope security alert and 2.1.7 update [*important*]]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-06/0144.html'}, {'name': 'zope-dtml-remote-modify(4716)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4716'}, {'name': '20000728 MDKSA-2000:026 Zope update', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-07/0412.html'}, {'name': 'FreeBSD-SA-00:38', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00%3A38.zope.asc'}, {'name': 'RHSA-2000:038', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2000-038.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.zope.org/Products/Zope/Hotfix_06_16_2000/security_alert'}, {'name': '1354', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1354'}, {'name': '2000615 Conectiva Linux Security Announcement - ZOPE', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000616103807.A3768%40conectiva.com.br'}]
CVE State: PUBLISHED
Explain CVE-2000-0484
Small HTTP Server ver 3.06 contains a memory corruption bug causing a memory overflow. The overflowed buffer crashes into a Structured Exception Handler resulting in a Denial of Service.
Affected Products: n/a
References: [{'name': '20000616 Remote DoS Attack in Small HTTP Server ver. 1.212 Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=96113651713414&w=2'}, {'name': '1355', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1355'}, {'name': '20000616 Remote DoS Attack in Small HTTP Server ver. 1.212 Vulnerability', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=96151775004229&w=2'}, {'name': 'small-http-get-overflow-dos(4692)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4692'}, {'tags': ['x_refsource_MISC'], 'url': 'https://gist.github.com/0xHop/66609ec1e243b913361e1acfa5253806'}]
CVE State: PUBLISHED
Explain CVE-2000-0485
Microsoft SQL Server allows local users to obtain database passwords via the Data Transformation Service (DTS) package Properties dialog, aka the "DTS Password" vulnerability.
Affected Products: n/a
References: [{'name': 'mssql-dts-reveal-passwords(4582)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4582'}, {'name': '1292', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1292'}, {'name': 'MS00-041', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-041'}, {'name': '20000530 Fw: Steal Passwords Using SQL Server EM', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/62771'}]
CVE State: PUBLISHED
Explain CVE-2000-0486
Buffer overflow in Cisco TACACS+ tac_plus server allows remote attackers to cause a denial of service via a malformed packet with a long length field.
Affected Products: n/a
References: [{'name': 'tacacsplus-packet-length-dos(4985)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4985'}, {'name': '1293', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1293'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-05/0370.html'}, {'name': '20000530 An Analysis of the TACACS+ Protocol and its Implementations', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-05/0369.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0487
The Protected Store in Windows 2000 does not properly select the strongest encryption when available, which causes it to use a default of 40-bit encryption instead of 56-bit DES encryption, aka the "Protected Store Key Length" vulnerability.
Affected Products: n/a
References: [{'name': 'MS00-032', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-032'}, {'name': '1295', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1295'}]
CVE State: PUBLISHED
Explain CVE-2000-0488
Buffer overflow in ITHouse mail server 1.04 allows remote attackers to execute arbitrary commands via a long RCPT TO mail command.
Affected Products: n/a
References: [{'name': '20000601 DST2K0007: Buffer Overrun in ITHouse Mail Server v1.04', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/win2ksecadvice/2000-q2/0148.html'}, {'name': '1285', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1285'}, {'name': 'ithouse-rcpt-overflow(4580)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4580'}]
CVE State: PUBLISHED
Explain CVE-2000-0489
FreeBSD, NetBSD, and OpenBSD allow an attacker to cause a denial of service by creating a large number of socket pairs using the socketpair function, setting a large buffer size via setsockopt, then writing large buffers.
Affected Products: n/a
References: [{'name': 'bsd-setsockopt-dos(3298)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3298'}, {'name': '622', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/622'}, {'name': '20000601 Local FreeBSD, Openbsd, NetBSD, DoS Vulnerability - Mac OS X affected', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=NCBBKFKDOLAGKIAPMILPCEJLCEAA.labs%40ussrback.com'}, {'name': '19990826 Local DoS in FreeBSD', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.9908270039010.16315-100000%40thetis.deor.org'}]
CVE State: PUBLISHED
Explain CVE-2000-0490
Buffer overflow in the NetWin DSMTP 2.7q in the NetWin dmail package allows remote attackers to execute arbitrary commands via a long ETRN request.
Affected Products: n/a
References: [{'name': 'dmail-etrn-dos(4579)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4579'}, {'name': '1297', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1297'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://netwinsite.com/dmail/security.htm'}, {'name': "20000601 Netwin's Dmail package", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-05/0407.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0491
Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to execute arbitrary commands or cause a denial of service via a long FORWARD_QUERY request.
Affected Products: n/a
References: [{'name': '20000607 Conectiva Linux Security Announcement - gdm', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-06/0025.html'}, {'name': '1279', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1279'}, {'name': '1370', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1370'}, {'name': '1233', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1233'}, {'name': '20000524 Security hole in gdm <= 2.0beta4-25', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/suse_security_announce_49.html'}, {'name': 'CSSA-2000-013.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-2000-013.0.txt'}, {'name': '20000521 "gdm" remote hole', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-05/0241.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0492
PassWD 1.2 uses weak encryption (trivial encoding) to store passwords, which allows an attacker who can read the password file to easliy decrypt the passwords.
Affected Products: n/a
References: [{'name': '1300', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1300'}, {'name': '20000609 Insecure encryption in PassWD v1.2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-05/0450.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0493
Buffer overflow in Simple Network Time Sync (SMTS) daemon allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long string.
Affected Products: n/a
References: [{'name': '20000601 Vulnerability in SNTS', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://archives.neohapsis.com/archives/vuln-dev/2000-q2/0843.html'}, {'name': '1289', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1289'}, {'name': 'timesync-bo-execute(4602)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4602'}]
CVE State: PUBLISHED
Explain CVE-2000-0494
Veritas Volume Manager creates a world writable .server_pids file, which allows local users to add arbitrary commands into the file, which is then executed by the vmsa_server script.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://seer.support.veritas.com/tnotes/volumeman/230053.htm'}, {'name': '1356', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1356'}, {'name': '20000616 Veritas Volume Manager 3.0.x hole', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-06/0151.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0495
Microsoft Windows Media Encoder allows remote attackers to cause a denial of service via a malformed request, aka the "Malformed Windows Media Encoder Request" vulnerability.
Affected Products: n/a
References: [{'name': 'MS00-038', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-038'}, {'name': '1282', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1282'}, {'name': 'ms-malformed-media-dos(4585)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4585'}]
CVE State: PUBLISHED
Explain CVE-2000-0497
IBM WebSphere server 3.0.2 allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case.
Affected Products: n/a
References: [{'name': '1328', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1328'}, {'name': '20000612 IBM WebSphere JSP showcode vulnerability', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0263.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-4.ibm.com/software/webservers/appserv/efix.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0498
Unify eWave ServletExec allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case.
Affected Products: n/a
References: [{'name': '1328', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1328'}, {'name': 'ewave-servletexec-jsp-source-read(4649)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4649'}, {'name': '20000608 Potential vulnerability in Unify eWave ServletExec', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0250.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0499
The default configuration of BEA WebLogic 3.1.8 through 4.5.1 allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case.
Affected Products: n/a
References: [{'name': '1328', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1328'}, {'name': '20000612 BEA WebLogic JSP showcode vulnerability', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0262.htm'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://developer.bea.com/alerts/security_000612.html'}, {'name': 'weblogic-jsp-source-read(4694)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4694'}]
CVE State: PUBLISHED
Explain CVE-2000-0500
The default configuration of BEA WebLogic 5.1.0 allows a remote attacker to view source code of programs by requesting a URL beginning with /file/, which causes the default servlet to display the file without further processing.
Affected Products: n/a
References: [{'name': '20000621 BEA WebLogic /file/ showcode vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=96161462915381&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.weblogic.com/docs51/admindocs/http.html#file'}, {'name': '1378', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1378'}, {'name': 'weblogic-file-source-read(4775)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4775'}]
CVE State: PUBLISHED
Explain CVE-2000-0501
Race condition in MDaemon 2.8.5.0 POP server allows local users to cause a denial of service by entering a UIDL command and quickly exiting the server.
Affected Products: n/a
References: [{'name': 'mdaemon-pass-dos(4745)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4745'}, {'name': '1366', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1366'}, {'name': '20000616 mdaemon 2.8.5.0 WinNT and Win9x remote DoS', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/ntbugtraq/2000-q2/0277.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0502
Mcafee VirusScan 4.03 does not properly restrict access to the alert text file before it is sent to the Central Alert Server, which allows local users to modify alerts in an arbitrary fashion.
Affected Products: n/a
References: [{'name': 'mcafee-alerting-dos(4641)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4641'}, {'name': '20000607 Mcafee Alerting DOS vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-06/0038.html'}, {'name': '6287', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6287'}, {'name': '1326', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1326'}]
CVE State: PUBLISHED
Explain CVE-2000-0503
The IFRAME of the WebBrowser control in Internet Explorer 5.01 allows a remote attacker to violate the cross frame security policy via the NavigateComplete2 event.
Affected Products: n/a
References: [{'name': '20000606 IE 5 Cross-frame security vulnerability using IFRAME and WebBrowser control', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/win2ksecadvice/2000-q2/0154.html'}, {'name': '1311', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1311'}]
CVE State: PUBLISHED
Explain CVE-2000-0504
libICE in XFree86 allows remote attackers to cause a denial of service by specifying a large value which is not properly checked by the SKIP_STRING macro.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.xfree86.org/security/'}, {'name': '1369', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1369'}, {'name': '20000619 XFree86: libICE DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-06/0170.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0505
The Apache 1.3.x HTTP server for Windows platforms allows remote attackers to list directory contents by requesting a URL containing a large number of / characters.
Affected Products: n/a
References: [{'name': 'ibm-http-file-retrieve(4575)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4575'}, {'name': '20000603 Re: IBM HTTP SERVER / APACHE', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.BSF.4.20.0006031912360.45740-100000%40alive.znep.com'}, {'name': '1284', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1284'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073140 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210603 svn commit: r1075360 [1/3] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210606 svn commit: r1075467 [1/2] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210606 svn commit: r1075470 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E'}]
CVE State: PUBLISHED
Explain CVE-2000-0506
The "capabilities" feature in Linux before 2.2.16 allows local users to cause a denial of service or gain privileges by setting the capabilities to prevent a setuid program from dropping privileges, aka the "Linux kernel setuid/setcap vulnerability."
Affected Products: n/a
References: [{'name': 'RHSA-2000:037', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2000-037.html'}, {'name': '1322', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1322'}, {'name': '20000609 Sendmail & procmail local root exploits on Linux kernel up to 2.2.16pre5', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.21.0006090852340.3475-300000%40alfa.elzabsoft.pl'}, {'name': '20000609 Trustix Security Advisory', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-06/0062.html'}, {'name': '20000802-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://sgigate.sgi.com/security/20000802-01-P'}, {'name': '20000608 CONECTIVA LINUX SECURITY ANNOUNCEMENT - kernel', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-06/0063.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0507
Imate Webmail Server 2.5 allows remote attackers to cause a denial of service via a long HELO command.
Affected Products: n/a
References: [{'name': '20000601 DST2K0006: Denial of Service Possibility in Imate WebMail Server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=95990195708509&w=2'}, {'name': 'nt-webmail-dos(4586)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4586'}, {'name': '1286', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1286'}]
CVE State: PUBLISHED
Explain CVE-2000-0508
rpc.lockd in Red Hat Linux 6.1 and 6.2 allows remote attackers to cause a denial of service via a malformed request.
Affected Products: n/a
References: [{'name': '20000608 Remote DOS in linux rpc.lockd', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-06/0073.html'}, {'name': '1372', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1372'}, {'name': 'linux-lockd-remote-dos(5050)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5050'}]
CVE State: PUBLISHED
Explain CVE-2000-0509
Buffer overflows in the finger and whois demonstration scripts in Sambar Server 4.3 allow remote attackers to execute arbitrary commands via a long hostname.
Affected Products: n/a
References: [{'name': '1287', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1287'}, {'name': '20000601 DST2K0008: Buffer Overrun in Sambar Server 4.3', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=95990103207665&w=2'}]
CVE State: PUBLISHED
Explain CVE-2000-0510
CUPS (Common Unix Printing System) 1.04 and earlier allows remote attackers to cause a denial of service via a malformed IPP request.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'ftp://ftp.easysw.com/pub/cups/1.0.5/cups-DoS.patch'}, {'name': '20000620 CUPS DoS Bugs', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-06/0188.html'}, {'name': 'debian-cups-malformed-ipp(4846)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4846'}, {'name': '1373', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1373'}]
CVE State: PUBLISHED
Explain CVE-2000-0511
CUPS (Common Unix Printing System) 1.04 and earlier allows remote attackers to cause a denial of service via a CGI POST request.
Affected Products: n/a
References: [{'name': 'debian-cups-posts(4846)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4846'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'ftp://ftp.easysw.com/pub/cups/1.0.5/cups-DoS.patch'}, {'name': '20000620 CUPS DoS Bugs', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-06/0188.html'}, {'name': '1373', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1373'}]
CVE State: PUBLISHED
Explain CVE-2000-0512
CUPS (Common Unix Printing System) 1.04 and earlier does not properly delete request files, which allows a remote attacker to cause a denial of service.
Affected Products: n/a
References: [{'name': 'debian-cups-posts(4846)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4846'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'ftp://ftp.easysw.com/pub/cups/1.0.5/cups-DoS.patch'}, {'name': '20000620 CUPS DoS Bugs', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-06/0188.html'}, {'name': '1373', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1373'}]
CVE State: PUBLISHED
Explain CVE-2000-0513
CUPS (Common Unix Printing System) 1.04 and earlier allows remote attackers to cause a denial of service by authenticating with a user name that does not exist or does not have a shadow password.
Affected Products: n/a
References: [{'name': 'debian-cups-posts(4846)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4846'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'ftp://ftp.easysw.com/pub/cups/1.0.5/cups-DoS.patch'}, {'name': '20000620 CUPS DoS Bugs', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-06/0188.html'}, {'name': '1373', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1373'}]
CVE State: PUBLISHED
Explain CVE-2000-0514
GSSFTP FTP daemon in Kerberos 5 1.1.x does not properly restrict access to some FTP commands, which allows remote attackers to cause a denial of service, and local users to gain root privileges.
Affected Products: n/a
References: [{'name': '1374', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1374'}, {'name': '20000614 Security Advisory: REMOTE ROOT VULNERABILITY IN GSSFTP DAEMON', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=ldvsnufao18.fsf%40saint-elmos-fire.mit.edu'}, {'name': 'kerberos-gssftpd-dos(4734)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4734'}, {'name': '4885', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4885'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://web.mit.edu/kerberos/www/advisories/ftp.txt'}]
CVE State: PUBLISHED
Explain CVE-2000-0515
The snmpd.conf configuration file for the SNMP daemon (snmpd) in HP-UX 11.0 is world writable, which allows local users to modify SNMP configuration or gain privileges.
Affected Products: n/a
References: [{'name': '20000608 Re: HP-UX SNMP daemon vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=200006090640.XAA00779%40hpchs.cup.hp.com'}, {'name': 'hpux-snmp-daemon(4643)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4643'}, {'name': '1327', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1327'}, {'name': '20000607 [ Hackerslab bug_paper ] HP-UX SNMP daemon vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=200006070511.OAA05492%40dogfoot.hackerslab.org'}]
CVE State: PUBLISHED
Explain CVE-2000-0516
When configured to store configuration information in an LDAP directory, Shiva Access Manager 5.0.0 stores the root DN (Distinguished Name) name and password in cleartext in a file that is world readable, which allows local users to compromise the LDAP server.
Affected Products: n/a
References: [{'name': '20000606 Shiva Access Manager 5.0.0 Plaintext LDAP root password.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-06/0008.html'}, {'name': 'shiva-plaintext-ldap-password(4612)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4612'}, {'name': '1329', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1329'}]
CVE State: PUBLISHED
Explain CVE-2000-0517
Netscape 4.73 and earlier does not properly warn users about a potentially invalid certificate if the user has previously accepted the certificate for a different web site, which could allow remote attackers to spoof a legitimate web site by compromising that site's DNS information.
Affected Products: n/a
References: [{'name': 'netscape-ssl-certificate(4550)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4550'}, {'name': '1260', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1260'}, {'name': 'CA-2000-08', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2000-08.html'}]
CVE State: PUBLISHED
Explain CVE-2000-0518
Internet Explorer 4.x and 5.x does not properly verify all contents of an SSL certificate if a connection is made to the server via an image or a frame, aka one of two different "SSL Certificate Validation" vulnerabilities.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.acrossecurity.com/aspr/ASPR-1999-12-15-1-PUB.txt'}, {'name': 'ie-invalid-frame-image-certificate(4624)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4624'}, {'name': 'CA-2000-10', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2000-10.html'}, {'name': 'MS00-039', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-039'}, {'name': '1309', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1309'}]
CVE State: PUBLISHED
Explain CVE-2000-0519
Internet Explorer 4.x and 5.x does not properly re-validate an SSL certificate if the user establishes a new SSL session with the same server during the same Internet Explorer session, aka one of two different "SSL Certificate Validation" vulnerabilities.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.acrossecurity.com/aspr/ASPR-1999-12-15-1-PUB.txt'}, {'name': 'CA-2000-10', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2000-10.html'}, {'name': 'MS00-039', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-039'}, {'name': '1309', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1309'}, {'name': 'ie-revalidate-certificate(4627)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/4627'}]
CVE State: PUBLISHED
Explain CVE-2000-0520
Buffer overflow in restore program 0.4b17 and earlier in dump package allows local users to execute arbitrary commands via a long tape name.
Affected Products: n/a
References: [{'name': '20000630 CONECTIVA LINUX SECURITY ANNOUNCEMENT - dump', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=96240393814071&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=11880'}, {'name': '1330', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1330'}]
CVE State: PUBLISHED