[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0833.

[Assistant] Buffer overflow in WinSMTP 1.06f and 2.X allows remote attackers to cause a denial of service via a long (1) USER or (2) HELO command.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0833?

[Assistant] 2000911 WinSMTPD remote exploit/DoS problem


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0833?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0834 mean in the context of cybersecurity?

[Assistant] CVE-2000-0834


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0834.

[Assistant] The Windows 2000 telnet client attempts to perform NTLM authentication by default, which allows remote attackers to capture and replay the NTLM challenge/response via a telnet:// URL that points to the malicious server, aka the "Windows 2000 Telnet Client NTLM Authentication" vulnerability.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0834?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0834?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0835 mean in the context of cybersecurity?

[Assistant] CVE-2000-0835


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0835.

[Assistant] search.dll Sambar ISAPI Search utility in Sambar Server 4.4 Beta 3 allows remote attackers to read arbitrary directories by specifying the directory in the query parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0835?

[Assistant] 20000915 Sambar Server search CGI vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0835?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0836 mean in the context of cybersecurity?

[Assistant] CVE-2000-0836


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0836.

[Assistant] Buffer overflow in CamShot WebCam Trial2.6 allows remote attackers to execute arbitrary commands via a long Authorization header.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0836?

[Assistant] 20000915 [NEWS] Vulnerability in CamShot server (Authorization)


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0836?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0837 mean in the context of cybersecurity?

[Assistant] CVE-2000-0837


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0837.

[Assistant] FTP Serv-U 2.5e allows remote attackers to cause a denial of service by sending a large number of null bytes.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0837?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0837?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0838 mean in the context of cybersecurity?

[Assistant] CVE-2000-0838


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0838.

[Assistant] Fastream FUR HTTP server 1.0b allows remote attackers to cause a denial of service via a long GET request.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0838?

[Assistant] 20000914 DST2K0028: DoS in FUR HTTP Server v1.0b


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0838?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0839 mean in the context of cybersecurity?

[Assistant] CVE-2000-0839


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0839.

[Assistant] WinCOM LPD 1.00.90 allows remote attackers to cause a denial of service via a large number of LPD options to the LPD port (515).


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0839?

[Assistant] 20000919 VIGILANTE-2000013: WinCOM LPD DoS


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0839?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0840 mean in the context of cybersecurity?

[Assistant] CVE-2000-0840


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0840.

[Assistant] Buffer overflow in XMail POP3 server before version 0.59 allows remote attackers to execute arbitrary commands via a long USER command.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0840?

[Assistant] 20000906 [NEWS] XMail vulnerable to a remotely exploitable buffer overflow (APOP, USER)


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0840?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0841 mean in the context of cybersecurity?

[Assistant] CVE-2000-0841


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0841.

[Assistant] Buffer overflow in XMail POP3 server before version 0.59 allows remote attackers to execute arbitrary commands via a long APOP command.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0841?

[Assistant] 20000906 [NEWS] XMail vulnerable to a remotely exploitable buffer overflow (APOP, USER)


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0841?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0842 mean in the context of cybersecurity?

[Assistant] CVE-2000-0842


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0842.

[Assistant] The search97cgi/vtopic" in the UnixWare 7 scohelphttp webserver allows remote attackers to read arbitrary files via a .. (dot dot) attack.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0842?

[Assistant] 20000911 SCO scohelhttp documentation webserver exposes local files


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0842?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0843 mean in the context of cybersecurity?

[Assistant] CVE-2000-0843


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0843.

[Assistant] Buffer overflow in pam_smb and pam_ntdom pluggable authentication modules (PAM) allow remote attackers to execute arbitrary commands via a login with a long user name.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0843?

[Assistant]
20000911 Conectiva Linux Security Announcement - pam_smb

20000913 pam_smb remotely exploitable buffer overflow

20000910 (SRADV00002) Remote root compromise through pam_smb and pam_ntdom

20000911 libpam-smb: remote root exploit


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0843?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0844 mean in the context of cybersecurity?

[Assistant] CVE-2000-0844


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0844.

[Assistant] Some functions that implement the locale subsystem on Unix do not  properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0844?

[Assistant]
20000902 Conectiva Linux Security Announcement - glibc

20000904 UNIX locale format string vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0844?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0845 mean in the context of cybersecurity?

[Assistant] CVE-2000-0845


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0845.

[Assistant] kdebug daemon (kdebugd) in Digital Unix 4.0F allows remote attackers to read arbitrary files by specifying the full file name in the initialization packet.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0845?

[Assistant] 20000918 [ENIGMA] Digital UNIX/Tru64 UNIX remote kdebug Vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0845?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0846 mean in the context of cybersecurity?

[Assistant] CVE-2000-0846


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0846.

[Assistant] Buffer overflow in Darxite 0.4 and earlier allows a remote attacker to execute arbitrary commands via a long username or password.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0846?

[Assistant] 20000821 Darxite daemon remote exploit/DoS problem


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0846?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0847 mean in the context of cybersecurity?

[Assistant] CVE-2000-0847


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0847.

[Assistant] Buffer overflow in University of Washington c-client library (used by pine and other programs) allows remote attackers to execute arbitrary commands via a long X-Keywords header.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0847?

[Assistant] 20000901 UW c-client library vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0847?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0848 mean in the context of cybersecurity?

[Assistant] CVE-2000-0848


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0848.

[Assistant] Buffer overflow in IBM WebSphere web application server (WAS) allows remote attackers to execute arbitrary commands via a long Host:  request header.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0848?

[Assistant] 20000915 WebSphere application server plugin issue & vendor fix


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0848?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0849 mean in the context of cybersecurity?

[Assistant] CVE-2000-0849


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0849.

[Assistant] Race condition in Microsoft Windows Media server allows remote attackers to cause a denial of service in the Windows Media Unicast Service via a malformed request, aka the "Unicast Service Race Condition" vulnerability.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0849?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0849?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0850 mean in the context of cybersecurity?

[Assistant] CVE-2000-0850


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0850.

[Assistant] Netegrity SiteMinder before 4.11 allows remote attackers to bypass its authentication mechanism by appending "$/FILENAME.ext" (where ext is .ccc, .class, or .jpg) to the requested URL.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0850?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0850?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0851 mean in the context of cybersecurity?

[Assistant] CVE-2000-0851


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0851.

[Assistant] Buffer overflow in the Still Image Service in Windows 2000 allows local users to gain additional privileges via a long WM_USER message, aka the "Still Image Service Privilege Escalation" vulnerability.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0851?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0851?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0852 mean in the context of cybersecurity?

[Assistant] CVE-2000-0852


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0852.

[Assistant] Multiple buffer overflows in eject on FreeBSD and possibly other OSes allows local users to gain root privileges.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0852?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0852?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0853 mean in the context of cybersecurity?

[Assistant] CVE-2000-0853


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0853.

[Assistant] YaBB Bulletin Board 9.1.2000 allows remote attackers to read arbitrary files via a .. (dot dot) attack.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0853?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0853?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0854 mean in the context of cybersecurity?

[Assistant] CVE-2000-0854


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0854.

[Assistant] When a Microsoft Office 2000 document is launched, the directory of that document is first used to locate DLL's such as riched20.dll and msi.dll, which could allow an attacker to execute arbitrary commands by inserting a Trojan Horse DLL into the same directory as the document.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0854?

[Assistant]
20000918 Double clicking on MS Office documents from Windows Explorer may execute arbitrary programs in some cases

20000922 Eudora + riched20.dll affects WinZip v8.0 as well

20000921 Mitigators for possible exploit of Eudora via Guninski #21,2000


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0854?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0855 mean in the context of cybersecurity?

[Assistant] CVE-2000-0855


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0855.

[Assistant] SunFTP build 9(1) allows remote attackers to cause a denial of service by connecting to the server and disconnecting before sending a newline.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0855?

[Assistant] 20000901 [EXPL] SunFTP vulnerable to two Denial-of-Service attacks (long buffer, half-open)


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0855?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0856 mean in the context of cybersecurity?

[Assistant] CVE-2000-0856


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0856.

[Assistant] Buffer overflow in SunFTP build 9(1) allows remote attackers to cause a denial of service or possibly execute arbitrary commands via a long GET request.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0856?

[Assistant] 20000901 [EXPL] SunFTP vulnerable to two Denial-of-Service attacks (long buffer, half-open)


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0856?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0857 mean in the context of cybersecurity?

[Assistant] CVE-2000-0857


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0857.

[Assistant] The logging capability in muh 2.05d IRC server does not properly cleanse user-injected format strings, which allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed nickname.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0857?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0857?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0858 mean in the context of cybersecurity?

[Assistant] CVE-2000-0858


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0858.

[Assistant] Vulnerability in Microsoft Windows NT 4.0 allows remote attackers to cause a denial of service in IIS by sending it a series of malformed requests which cause INETINFO.EXE to fail, aka the "Invalid URL" vulnerability.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0858?

[Assistant] 20000906 VIGILANTE-2000009: "Invalid URL" DoS


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0858?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0859 mean in the context of cybersecurity?

[Assistant] CVE-2000-0859


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0859.

[Assistant] The web configuration server for NTMail V5 and V6 allows remote attackers to cause a denial of service via a series of partial HTTP requests.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0859?

[Assistant] 20000904 VIGILANTE-2000008: NTMail Configuration Service DoS


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0859?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0860 mean in the context of cybersecurity?

[Assistant] CVE-2000-0860


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0860.

[Assistant] The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary files by setting hidden form fields whose names match the names of internal PHP script variables.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0860?

[Assistant]
20000904 Re: [PHP-DEV] RE: (SRADV00001) Arbitrary file disclosure through PHP file upload

20000903 (SRADV00001) Arbitrary file disclosure through PHP file upload


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0860?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0861 mean in the context of cybersecurity?

[Assistant] CVE-2000-0861


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0861.

[Assistant] Mailman 1.1 allows list administrators to execute arbitrary commands via shell metacharacters in the %(listname) macro expansion.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0861?

[Assistant] 20000907 Mailman 1.1 + external archiver vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0861?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0862 mean in the context of cybersecurity?

[Assistant] CVE-2000-0862


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0862.

[Assistant] Vulnerability in an administrative interface utility for Allaire Spectra 1.0.1 allows remote attackers to read and modify sensitive configuration information.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0862?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0862?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0863 mean in the context of cybersecurity?

[Assistant] CVE-2000-0863


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0863.

[Assistant] Buffer overflow in listmanager earlier than 2.105.1 allows local users to gain additional privileges.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0863?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0863?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0864 mean in the context of cybersecurity?

[Assistant] CVE-2000-0864


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0864.

[Assistant] Race condition in the creation of a Unix domain socket in GNOME esound 0.2.19 and earlier allows a local user to change the permissions of arbitrary files and directories, and gain additional privileges, via a  symlink attack.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0864?

[Assistant] 20001006 Immunix OS Security Update for esound


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0864?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0865 mean in the context of cybersecurity?

[Assistant] CVE-2000-0865


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0865.

[Assistant] Buffer overflow in dvtermtype in Tridia Double Vision 3.07.00 allows local users to gain root privileges via a long terminal type argument.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0865?

[Assistant] 20000916 Advisory: Tridia DoubleVision / SCO UnixWare


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0865?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0866 mean in the context of cybersecurity?

[Assistant] CVE-2000-0866


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0866.

[Assistant] Interbase 6 SuperServer for Linux allows an attacker to cause a denial of service via a query containing 0 bytes.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0866?

[Assistant] 20000907 SEGFAULTING Interbase 6 SS Linux


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0866?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0867 mean in the context of cybersecurity?

[Assistant] CVE-2000-0867


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0867.

[Assistant] Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, which allows local users to gain root privileges by triggering malformed kernel messages.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0867?

[Assistant]
20000918 Conectiva Linux Security Announcement - sysklogd

20000920 syslogd + klogd format string parsing error


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0867?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0868 mean in the context of cybersecurity?

[Assistant] CVE-2000-0868


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0868.

[Assistant] The default configuration of Apache 1.3.12 in SuSE Linux 6.4 allows remote attackers to read source code for CGI scripts by replacing the /cgi-bin/ in the requested URL with /cgi-bin-sdb/.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0868?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0868?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0869 mean in the context of cybersecurity?

[Assistant] CVE-2000-0869


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0869.

[Assistant] The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbitrary directories via the PROPFIND HTTP request method.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0869?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0869?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0870 mean in the context of cybersecurity?

[Assistant] CVE-2000-0870


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0870.

[Assistant] Buffer overflow in EFTP allows remote attackers to cause a denial of service via a long string.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0870?

[Assistant] 20000911[EXPL] EFTP vulnerable to two DoS attacks


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0870?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0871 mean in the context of cybersecurity?

[Assistant] CVE-2000-0871


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0871.

[Assistant] Buffer overflow in EFTP allows remote attackers to cause a denial of service by sending a string that does not contain a newline, then disconnecting from the server.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0871?

[Assistant] 20000911[EXPL] EFTP vulnerable to two DoS attacks


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0871?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0872 mean in the context of cybersecurity?

[Assistant] CVE-2000-0872


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0872.

[Assistant] explorer.php in PhotoAlbum 0.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) attack.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0872?

[Assistant] 20000906 PhotoAlbum 0.9.9 explorer.php Vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0872?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0873 mean in the context of cybersecurity?

[Assistant] CVE-2000-0873


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0873.

[Assistant] netstat in AIX 4.x.x does not properly restrict access to the -Zi option, which allows local users to clear network interface statistics and possibly hide evidence of unusual network activities.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0873?

[Assistant] 20000903 aix allows clearing the interface stats


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0873?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0874 mean in the context of cybersecurity?

[Assistant] CVE-2000-0874


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0874.

[Assistant] Eudora mail client includes the absolute path of the sender's host within a virtual card (VCF).


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0874?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0874?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0875 mean in the context of cybersecurity?

[Assistant] CVE-2000-0875


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0875.

[Assistant] WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to cause a denial of service by sending a long string of unprintable characters.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0875?

[Assistant] 20000905 WFTPD/WFTPD Pro 2.41 RC12 vulnerabilities


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0875?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0876 mean in the context of cybersecurity?

[Assistant] CVE-2000-0876


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0876.

[Assistant] WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to obtain the  full pathname of the server via a "%C" command, which generates an error message that includes the pathname.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0876?

[Assistant] 20000905 WFTPD/WFTPD Pro 2.41 RC12 vulnerabilities


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0876?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0877 mean in the context of cybersecurity?

[Assistant] CVE-2000-0877


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0877.

[Assistant] mailform.pl CGI script in MailForm 2.0 allows remote attackers to read arbitrary files by specifying the file name in the XX-attach_file parameter, which MailForm then sends to the attacker.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0877?

[Assistant] 20000911 Unsafe passing of variables to mailform.pl in MailForm V2.0


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0877?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0878 mean in the context of cybersecurity?

[Assistant] CVE-2000-0878


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0878.

[Assistant] The mailto CGI script allows remote attacker to execute arbitrary commands via shell metacharacters in the emailadd form field.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0878?

[Assistant] 20000911 Fwd: Poor variable checking in mailto.cgi


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0878?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0879 mean in the context of cybersecurity?

[Assistant] CVE-2000-0879


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0879.

[Assistant] LPPlus programs dccsched, dcclpdser, dccbkst, dccshut, dcclpdshut, and dccbkstshut are installed setuid root and world executable, which allows arbitrary local users to start and stop various LPD services.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0879?

[Assistant] 20000906 Multiple Security Holes in LPPlus


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0879?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0880 mean in the context of cybersecurity?

[Assistant] CVE-2000-0880


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0880.

[Assistant] LPPlus creates the lpdprocess file with world-writeable permissions, which allows local users to kill arbitrary processes by specifying an alternate process ID and using the setuid dcclpdshut program to kill the process that was specified in the lpdprocess file.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0880?

[Assistant] 20000906 Multiple Security Holes in LPPlus


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0880?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0881 mean in the context of cybersecurity?

[Assistant] CVE-2000-0881


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0881.

[Assistant] The dccscan setuid program in LPPlus does not properly check if the user has the permissions to print the file that is specified to dccscan, which allows local users to print arbitrary files.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0881?

[Assistant] 20000906 Multiple Security Holes in LPPlus


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0881?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0882 mean in the context of cybersecurity?

[Assistant] CVE-2000-0882


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0882.

[Assistant] Intel Express 500 series switches allow a remote attacker to cause a denial of service via a malformed ICMP packet, which causes the CPU to crash.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0882?

[Assistant] 20000906 VIGILANTE-2000010: Intel Express Switch series 500 DoS #2


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0882?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0883 mean in the context of cybersecurity?

[Assistant] CVE-2000-0883


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0883.

[Assistant] The default configuration of mod_perl for Apache as installed on Mandrake Linux 6.1 through 7.1 sets the /perl/ directory to be browseable, which allows remote attackers to list the contents of that directory.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0883?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0883?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0884 mean in the context of cybersecurity?

[Assistant] CVE-2000-0884


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0884.

[Assistant] IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed URLs that contain UNICODE encoded characters, aka the "Web Server Folder Traversal" vulnerability.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0884?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0884?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0885 mean in the context of cybersecurity?

[Assistant] CVE-2000-0885


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0885.

[Assistant] Buffer overflows in Microsoft Network Monitor (Netmon) allow remote attackers to execute arbitrary commands via a long Browser Name in a CIFS Browse Frame, a long SNMP community name, or a long username or filename in an SMB session, aka the "Netmon Protocol Parsing" vulnerability.  NOTE: It is highly likely that this candidate will be split into multiple candidates.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0885?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0885?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0886 mean in the context of cybersecurity?

[Assistant] CVE-2000-0886


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0886.

[Assistant] IIS 5.0 allows remote attackers to execute arbitrary commands via a malformed request for an executable file whose name is appended with operating system commands, aka the "Web Server File Request Parsing" vulnerability.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0886?

[Assistant] 20001107 NSFOCUS SA2000-07 : Microsoft IIS 4.0/5.0 CGI File Name Inspection Vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0886?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0887 mean in the context of cybersecurity?

[Assistant] CVE-2000-0887


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0887.

[Assistant] named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making a compressed zone transfer (ZXFR) request and performing a name service query on an authoritative record that is not cached, aka the "zxfr bug."


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0887?

[Assistant] 20001115 Trustix Security Advisory - bind and openssh (and modutils)


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0887?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0888 mean in the context of cybersecurity?

[Assistant] CVE-2000-0888


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0888.

[Assistant] named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by sending an SRV record to the server, aka the "srv bug."


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0888?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0888?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0889 mean in the context of cybersecurity?

[Assistant] CVE-2000-0889


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0889.

[Assistant] Two Sun security certificates have been compromised, which could allow attackers to insert malicious code such as applets and make it appear that it is signed by Sun.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0889?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0889?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0890 mean in the context of cybersecurity?

[Assistant] CVE-2000-0890


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0890.

[Assistant] periodic in FreeBSD 4.1.1 and earlier, and possibly other operating systems, allows local users to overwrite arbitrary files via a symlink attack.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0890?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0890?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0891 mean in the context of cybersecurity?

[Assistant] CVE-2000-0891


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0891.

[Assistant] A default ECL in Lotus Notes before 5.02 allows remote attackers to execute arbitrary commands by attaching a malicious program in an email message that is automatically executed when the user opens the email.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0891?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0891?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0892 mean in the context of cybersecurity?

[Assistant] CVE-2000-0892


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0892.

[Assistant] Some telnet clients allow remote telnet servers to request environment variables from the client that may contain sensitive information, or remote web servers to obtain the information via a telnet: URL.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0892?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0892?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0893 mean in the context of cybersecurity?

[Assistant] CVE-2000-0893


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0893.

[Assistant] The presence of the Distributed GL Daemon (dgld) service on port 5232 on SGI IRIX systems allows remote attackers to identify the target host as an SGI system.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0893?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0893?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0894 mean in the context of cybersecurity?

[Assistant] CVE-2000-0894


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0894.

[Assistant] HTTP server on the WatchGuard SOHO firewall does not properly restrict access to administrative functions such as password resets or rebooting, which allows attackers to cause a denial of service or conduct unauthorized activities.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0894?

[Assistant] 20001214 Multiple vulnerabilities in the WatchGuard SOHO Firewall


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0894?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0895 mean in the context of cybersecurity?

[Assistant] CVE-2000-0895


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0895.

[Assistant] Buffer overflow in HTTP server on the WatchGuard SOHO firewall allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long GET request.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0895?

[Assistant] 20001214 Multiple vulnerabilities in the WatchGuard SOHO Firewall


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0895?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0896 mean in the context of cybersecurity?

[Assistant] CVE-2000-0896


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0896.

[Assistant] WatchGuard SOHO firewall allows remote attackers to cause a denial of service via a flood of fragmented IP packets, which causes the firewall to drop connections and stop forwarding packets.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0896?

[Assistant] 20001214 Multiple vulnerabilities in the WatchGuard SOHO Firewall


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0896?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0897 mean in the context of cybersecurity?

[Assistant] CVE-2000-0897


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0897.

[Assistant] Small HTTP Server 2.03 and earlier allows remote attackers to cause a denial of service by repeatedly requesting a URL that references a directory that does not contain an index.html file, which consumes memory that is not released after the request is completed.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0897?

[Assistant] 20001114 Vulnerabilites in SmallHTTP Server


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0897?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0898 mean in the context of cybersecurity?

[Assistant] CVE-2000-0898


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0898.

[Assistant] Small HTTP Server 2.01 does not properly process Server Side Includes (SSI) tags that contain null values, which allows local users, and possibly remote attackers, to cause the server to crash by inserting the SSI into an HTML file.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0898?

[Assistant] 20001114 Vulnerabilites in SmallHTTP Server


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0898?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0899 mean in the context of cybersecurity?

[Assistant] CVE-2000-0899


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0899.

[Assistant] Small HTTP Server 2.01 allows remote attackers to cause a denial of service by connecting to the server and sending out multiple GET, HEAD, or POST requests and closing the connection before the server responds to the requests.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0899?

[Assistant] 20001114 Vulnerabilites in SmallHTTP Server


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0899?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0900 mean in the context of cybersecurity?

[Assistant] CVE-2000-0900


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0900.

[Assistant] Directory traversal vulnerability in ssi CGI program in thttpd 2.19 and earlier allows remote attackers to read arbitrary files via a "%2e%2e" string, a variation of the .. (dot dot) attack.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0900?

[Assistant] 20001002 thttpd ssi: retrieval of arbitrary world-readable files


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0900?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0901 mean in the context of cybersecurity?

[Assistant] CVE-2000-0901


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0901.

[Assistant] Format string vulnerability in screen 3.9.5 and earlier allows local users to gain root privileges via format characters in the vbell_msg initialization variable.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0901?

[Assistant]
20000906 screen format string parsing security problem

20000905 screen 3.9.5 root vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0901?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0902 mean in the context of cybersecurity?

[Assistant] CVE-2000-0902


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0902.

[Assistant] getalbum.php in PhotoAlbum before 0.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) attack.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0902?

[Assistant] 20000907 Re: PhotoAlbum 0.9.9 explorer.php Vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0902?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0903 mean in the context of cybersecurity?

[Assistant] CVE-2000-0903


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0903.

[Assistant] Directory traversal vulnerability in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read arbitrary files via a .. (dot dot) attack.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0903?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0903?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0904 mean in the context of cybersecurity?

[Assistant] CVE-2000-0904


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0904.

[Assistant] Voyager web server 2.01B in the demo disks for QNX 405 stores sensitive web client information in the .photon directory in the web document root, which allows remote attackers to obtain that information.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0904?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0904?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0905 mean in the context of cybersecurity?

[Assistant] CVE-2000-0905


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0905.

[Assistant] QNX Embedded Resource Manager in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read sensitive system statistics information via the embedded.html web page.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0905?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0905?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0906 mean in the context of cybersecurity?

[Assistant] CVE-2000-0906


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0906.

[Assistant] Directory traversal vulnerability in Moreover.com cached_feed.cgi script version 4.July.00 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the category or format parameters.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0906?

[Assistant] 20001002 Moreover Cached_Feed CGI Vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0906?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0907 mean in the context of cybersecurity?

[Assistant] CVE-2000-0907


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0907.

[Assistant] EServ 2.92 Build 2982 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long HELO and MAIL FROM commands.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0907?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0907?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0908 mean in the context of cybersecurity?

[Assistant] CVE-2000-0908


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0908.

[Assistant] BrowseGate 2.80 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long Authorization or Referer MIME headers in the HTTP request.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0908?

[Assistant]
20000921 DST2K0031: DoS in BrowseGate(Home) v2.80(H)

20000921 DST2K0031: DoS in BrowseGate(Home) v2.80(H)


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0908?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0909 mean in the context of cybersecurity?

[Assistant] CVE-2000-0909


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0909.

[Assistant] Buffer overflow in the automatic mail checking component of Pine 4.21 and earlier allows remote attackers to execute arbitrary commands via a long From: header.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0909?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0909?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0910 mean in the context of cybersecurity?

[Assistant] CVE-2000-0910


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0910.

[Assistant] Horde library 1.02 allows attackers to execute arbitrary commands via shell metacharacters in the "from" address.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0910?

[Assistant] 20000908 horde library bug - unchecked from-address


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0910?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0911 mean in the context of cybersecurity?

[Assistant] CVE-2000-0911


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0911.

[Assistant] IMP 2.2 and earlier allows attackers to read and delete arbitrary files by modifying the attachment_name hidden form variable, which causes IMP to send the file to the attacker as an attachment.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0911?

[Assistant] 20000912  (SRADV00003) Arbitrary file disclosure through IMP


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0911?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0912 mean in the context of cybersecurity?

[Assistant] CVE-2000-0912


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0912.

[Assistant] MultiHTML CGI script allows remote attackers to read arbitrary files and possibly execute arbitrary commands by specifying the file name to the "multi" parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0912?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0912?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0913 mean in the context of cybersecurity?

[Assistant] CVE-2000-0913


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0913.

[Assistant] mod_rewrite in Apache 1.3.12 and earlier allows remote attackers to read arbitrary files if a RewriteRule directive is expanded to include a filename whose name contains a regular expression.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0913?

[Assistant]
20000929 Security vulnerability in Apache mod_rewrite

20001011 Conectiva Linux Security Announcement - apache

[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/

[httpd-cvs] 20210330 svn commit: r1073140 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/

[httpd-cvs] 20210603 svn commit: r1075360 [1/3] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

[httpd-cvs] 20210606 svn commit: r1075467 [1/2] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

[httpd-cvs] 20210606 svn commit: r1075470 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0913?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0914 mean in the context of cybersecurity?

[Assistant] CVE-2000-0914


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0914.

[Assistant] OpenBSD 2.6 and earlier allows remote attackers to cause a denial of service by flooding the server with ARP requests.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0914?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0914?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0915 mean in the context of cybersecurity?

[Assistant] CVE-2000-0915


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0915.

[Assistant] fingerd in FreeBSD 4.1.1 allows remote attackers to read arbitrary files by specifying the target file name instead of a regular user name.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0915?

[Assistant] 20001002 [sa2c@and.or.jp: bin/21704: enabling fingerd makes files world readable]


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0915?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0916 mean in the context of cybersecurity?

[Assistant] CVE-2000-0916


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0916.

[Assistant] FreeBSD 4.1.1 and earlier, and possibly other BSD-based OSes, uses an insufficient random number generator to generate initial TCP sequence numbers (ISN), which allows remote attackers to spoof TCP connections.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0916?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0916?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0917 mean in the context of cybersecurity?

[Assistant] CVE-2000-0917


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0917.

[Assistant] Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0917?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0917?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0918 mean in the context of cybersecurity?

[Assistant] CVE-2000-0918


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0918.

[Assistant] Format string vulnerability in kvt in KDE 1.1.2 may allow local users to execute arbitrary commands via a DISPLAY environmental variable that contains formatting characters.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0918?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0918?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0919 mean in the context of cybersecurity?

[Assistant] CVE-2000-0919


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0919.

[Assistant] Directory traversal vulnerability in PHPix Photo Album 1.0.2 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0919?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0919?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0920 mean in the context of cybersecurity?

[Assistant] CVE-2000-0920


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0920.

[Assistant] Directory traversal vulnerability in BOA web server 0.94.8.2 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot) attack in the GET HTTP request that uses a "%2E" instead of a "."


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0920?

[Assistant]
20001006 Vulnerability in BOA web server v0.94.8.2

20001009 boa: exposes contents of local files


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0920?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0921 mean in the context of cybersecurity?

[Assistant] CVE-2000-0921


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0921.

[Assistant] Directory traversal vulnerability in Hassan Consulting shop.cgi shopping cart program allows remote attackers to read arbitrary files via a .. (dot dot) attack on the page parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0921?

[Assistant] 20001007 Security Advisory: Hassan Consulting's shop.cgi Directory Traversal Vulnerability.


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0921?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0922 mean in the context of cybersecurity?

[Assistant] CVE-2000-0922


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0922.

[Assistant] Directory traversal vulnerability in Bytes Interactive Web Shopper shopping cart program (shopper.cgi) 2.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack on the newpage parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0922?

[Assistant] 20001008 Security Advisory: Bytes Interactive's Web Shopper (shopper.cgi) Directory Traversal Vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0922?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0923 mean in the context of cybersecurity?

[Assistant] CVE-2000-0923


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0923.

[Assistant] authenticate.cgi CGI program in Aplio PRO allows remote attackers to execute arbitrary commands via shell metacharacters in the password parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0923?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0923?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0924 mean in the context of cybersecurity?

[Assistant] CVE-2000-0924


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0924.

[Assistant] Directory traversal vulnerability in search.cgi CGI script in Armada Master Index allows remote attackers to read arbitrary files via a .. (dot dot) attack in the "catigory" parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0924?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0924?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0925 mean in the context of cybersecurity?

[Assistant] CVE-2000-0925


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0925.

[Assistant] The default installation of SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) installs the _private directory with world readable permissions, which allows remote attackers to obtain sensitive information.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0925?

[Assistant]
20001002 DST2K0035: Credit card (customer) details exposed within CyberOff ice Shopping Cart v2

20001002 DST2K0035: Credit card (customer) details exposed within CyberOff ice Shopping Cart v2


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0925?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0926 mean in the context of cybersecurity?

[Assistant] CVE-2000-0926


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0926.

[Assistant] SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) allows remote attackers to modify price information by changing the "Price" hidden form variable.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0926?

[Assistant]
20001002 DST2K0036: Price modification possible in CyberOffice Shopping Cart

20001002 DST2K0036: Price modification possible in CyberOffice Shopping Ca rt


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0926?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0927 mean in the context of cybersecurity?

[Assistant] CVE-2000-0927


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0927.

[Assistant] WQuinn QuotaAdvisor 4.1 does not properly record file sizes if they are stored in alternative data streams, which allows users to bypass quota restrictions.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0927?

[Assistant]
20000928 DST2K0037: QuotaAdvisor 4.1 by WQuinn is susceptible to alternati ve datastreams to bypass quotas.

20000928 DST2K0037: QuotaAdvisor 4.1 by WQuinn is susceptible to alternati ve datastreams to bypass quotas.


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0927?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0928 mean in the context of cybersecurity?

[Assistant] CVE-2000-0928


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0928.

[Assistant] WQuinn QuotaAdvisor 4.1 allows users to list directories and files by running a report on the targeted shares.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0928?

[Assistant] 20001006 DST2K0040: QuotaAdvisor 4.1 by WQuinn susceptible to any user bei ng able to list (not read) all files on any server running QuotaAdvisor.


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0928?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0929 mean in the context of cybersecurity?

[Assistant] CVE-2000-0929


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0929.

[Assistant] Microsoft Windows Media Player 7 allows attackers to cause a denial of service in RTF-enabled email clients via an embedded OCX control that is not closed properly, aka the "OCX Attachment" vulnerability.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0929?

[Assistant] 20000929 Malformed Embedded Windows Media Player 7 "OCX Attachment"


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0929?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0930 mean in the context of cybersecurity?

[Assistant] CVE-2000-0930


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0930.

[Assistant] Pegasus Mail 3.12 allows remote attackers to read arbitrary files via an embedded URL that calls the mailto: protocol with a -F switch.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0930?

[Assistant]
20001030 Pegasus Mail file reading vulnerability

20001003 Pegasus mail file reading vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0930?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0931 mean in the context of cybersecurity?

[Assistant] CVE-2000-0931


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0931.

[Assistant] Buffer overflow in Pegasus Mail 3.11 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long email message containing binary data.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0931?

[Assistant] 20001004 Another Pegasus Mail vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0931?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0932 mean in the context of cybersecurity?

[Assistant] CVE-2000-0932


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0932.

[Assistant] MAILsweeper for SMTP 3.x does not properly handle corrupt CDA documents in a ZIP file and hangs, which allows remote attackers to cause a denial of service.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0932?

[Assistant] 20000926 FW: DOS for Content Technologies' MAILsweeper for SMTP.


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0932?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0933 mean in the context of cybersecurity?

[Assistant] CVE-2000-0933


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0933.

[Assistant] The Input Method Editor (IME) in the Simplified Chinese version of Windows 2000 does not disable access to privileged functionality that should normally be restricted, which allows local users to gain privileges, aka the "Simplified Chinese IME State Recognition" vulnerability.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0933?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0933?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0934 mean in the context of cybersecurity?

[Assistant] CVE-2000-0934


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0934.

[Assistant] Glint in Red Hat Linux 5.2 allows local users to overwrite arbitrary files and cause a denial of service via a symlink attack.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0934?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0934?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0935 mean in the context of cybersecurity?

[Assistant] CVE-2000-0935


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0935.

[Assistant] Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows local users to overwrite arbitrary files via a symlink attack on the cgi.log file.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0935?

[Assistant] 20001030 Samba 2.0.7 SWAT vulnerabilities


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0935?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0936 mean in the context of cybersecurity?

[Assistant] CVE-2000-0936


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0936.

[Assistant] Samba Web Administration Tool (SWAT) in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, which allows local users to read sensitive information such as user names and passwords.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0936?

[Assistant] 20001030 Samba 2.0.7 SWAT vulnerabilities


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0936?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0937 mean in the context of cybersecurity?

[Assistant] CVE-2000-0937


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0937.

[Assistant] Samba Web Administration Tool (SWAT) in Samba 2.0.7 does not log login attempts in which the username is correct but the password is wrong, which allows remote attackers to conduct brute force password guessing attacks.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0937?

[Assistant] 20001030 Samba 2.0.7 SWAT vulnerabilities


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0937?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0938 mean in the context of cybersecurity?

[Assistant] CVE-2000-0938


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0938.

[Assistant] Samba Web Administration Tool (SWAT) in Samba 2.0.7 supplies a different error message when a valid username is provided versus an invalid name, which allows remote attackers to identify valid users on the server.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0938?

[Assistant] 20001030 Samba 2.0.7 SWAT vulnerabilities


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0938?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0939 mean in the context of cybersecurity?

[Assistant] CVE-2000-0939


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0939.

[Assistant] Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows remote attackers to cause a denial of service by repeatedly submitting a nonstandard URL in the GET HTTP request and forcing it to restart.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0939?

[Assistant] 20001030 Samba 2.0.7 SWAT vulnerabilities


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0939?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0940 mean in the context of cybersecurity?

[Assistant] CVE-2000-0940


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0940.

[Assistant] Directory traversal vulnerability in Metertek pagelog.cgi allows remote attackers to read arbitrary files via a .. (dot dot) attack on the "name" or "display" parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0940?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0940?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0941 mean in the context of cybersecurity?

[Assistant] CVE-2000-0941


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0941.

[Assistant] Kootenay Web KW Whois 1.0 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the "whois" parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0941?

[Assistant]
20001029 Re: Remote command execution via KW Whois 1.0 (addition)

20001029 Remote command execution via KW Whois 1.0


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0941?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0942 mean in the context of cybersecurity?

[Assistant] CVE-2000-0942


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2000-0942.

[Assistant] The CiWebHitsFile component in Microsoft Indexing Services for Windows 2000 allows remote attackers to conduct a cross site scripting (CSS) attack via a CiRestriction parameter in a .htw request, aka the "Indexing Services Cross Site Scripting" vulnerability.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2000-0942?

[Assistant] 20001028 IIS 5.0 cross site scripting vulnerability - using .htw


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2000-0942?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2000-0943 mean in the context of cybersecurity?

[Assistant] CVE-2000-0943