Reddit NetSec

CVE Database V5

AlienVault OTX General

Reddit InfoSec News

Exploit-DB RSS Feed

ThreatFox MISP Feed

CIRCL OSINT Feed

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Buffer overflow in xlockmore xlock program version 4.16 and earlier allows local users to read sensitive data from memory via a long -mode option.

CVE-2000-0455 is a buffer overflow vulnerability found in the xlockmore xlock program, specifically in version 4.16 and earlier. The vulnerability arises when a local user supplies an excessively long argument to the '-mode' option of the xlock program. This input is not properly bounds-checked, leading to a buffer overflow condition. Exploiting this flaw allows a local attacker to read sensitive data from the program's memory space. The vulnerability does not allow for code execution or privilege escalation but compromises confidentiality by exposing potentially sensitive information stored in memory. The vulnerability requires local access, meaning the attacker must have an account on the affected system. No authentication is required beyond local user access, and no user interaction beyond invoking the vulnerable program with crafted parameters is necessary. The vulnerability has a CVSS v2 base score of 2.1, indicating a low severity primarily due to the limited impact (confidentiality only) and the requirement for local access. There is no patch available for this vulnerability, and no known exploits have been reported in the wild. The affected product, xlockmore, is a screen-locking utility commonly used on Unix and Linux systems to lock the graphical user interface session. Given the age of the vulnerability (published in 2000) and the niche use of xlockmore, this vulnerability is largely of historical interest but may still be relevant in legacy or specialized environments.

NVD CVE Feed

Detailed information about CVE-2000-0455: Buffer overflow in xlockmore xlock program version 4.16 and earlier allows local users to read sensi affecting david_b

CVE-2000-0455: Buffer overflow in xlockmore xlock program version 4.16 and earlier allows local users to read sensi - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2000-0455: Buffer overflow in xlockmore xlock program version 4.16 and earlier allows local users to read sensi

Buffer overflow in Linux cdrecord allows local users to gain privileges via the dev parameter.

CVE-2000-0454 is a high-severity buffer overflow vulnerability found in the Linux cdrecord utility, specifically affecting Mandrake Linux version 7.0. The vulnerability arises from improper handling of the 'dev' parameter, which allows a local user to trigger a buffer overflow condition. This overflow can be exploited to execute arbitrary code with elevated privileges, effectively enabling privilege escalation from a local user to root. The vulnerability requires local access, meaning an attacker must already have some form of user-level access to the system. The CVSS v2 score is 7.2, reflecting a high impact on confidentiality, integrity, and availability, with low attack complexity and no authentication required beyond local user access. The lack of a patch or fix at the time of disclosure increases the risk for affected systems. Although no known exploits were reported in the wild, the nature of the vulnerability and its impact make it a significant threat to any system running the affected version of Mandrake Linux. Given the age of the vulnerability (published in 2000), it primarily affects legacy systems that may still be in use in certain environments. The vulnerability compromises system security by allowing local users to gain root privileges, potentially leading to full system compromise, unauthorized data access, and disruption of services.

Detailed information about CVE-2000-0454: Buffer overflow in Linux cdrecord allows local users to gain privileges via the dev parameter. affecting mandrakesoft 

CVE-2000-0454: Buffer overflow in Linux cdrecord allows local users to gain privileges via the dev parameter. - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2000-0454: Buffer overflow in Linux cdrecord allows local users to gain privileges via the dev parameter.

Buffer overflow in KDE kdesud on Linux allows local uses to gain privileges via a long DISPLAY environmental variable.

CVE-2000-0460 is a high-severity buffer overflow vulnerability found in the KDE kdesud utility on Linux systems, specifically affecting KDE versions 1.1 through 1.2. The vulnerability arises from improper handling of the DISPLAY environment variable, where supplying an excessively long string causes a buffer overflow. This overflow can be exploited by a local attacker to escalate privileges, potentially gaining root or administrative access on the affected system. The attack vector requires local access, meaning the attacker must already have some level of user access to the Linux machine. The vulnerability does not require authentication beyond local user access, and no user interaction beyond setting the environment variable is necessary. The CVSS v2 score of 7.2 reflects the high impact on confidentiality, integrity, and availability, as successful exploitation can lead to full system compromise. No official patch is available for this vulnerability, and no known exploits have been reported in the wild, likely due to the age of the vulnerability and the obsolescence of the affected KDE versions. However, the underlying issue remains a critical security risk for legacy systems still running these KDE versions. The vulnerability is rooted in classic buffer overflow programming errors, which allow attackers to overwrite memory and execute arbitrary code with elevated privileges.

Detailed information about CVE-2000-0460: Buffer overflow in KDE kdesud on Linux allows local uses to gain privileges via a long DISPLAY envir affecting kde kde

CVE-2000-0460: Buffer overflow in KDE kdesud on Linux allows local uses to gain privileges via a long DISPLAY envir - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2000-0460: Buffer overflow in KDE kdesud on Linux allows local uses to gain privileges via a long DISPLAY envir

Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to execute arbitrary commands or cause a denial of service via a long FORWARD_QUERY request.

CVE-2000-0491 is a critical buffer overflow vulnerability found in the X Display Manager Control Protocol (XDMCP) parsing code of several X Window System display managers, specifically GNOME's gdm, KDE's kdm, and wdm. The vulnerability arises when these display managers process a specially crafted FORWARD_QUERY request containing an excessively long input string. Due to improper bounds checking in the XDMCP parsing logic, this input can overflow a buffer allocated on the stack or heap, leading to memory corruption. This memory corruption can be exploited by a remote attacker to execute arbitrary code with the privileges of the display manager process or cause a denial of service (DoS) by crashing the service. The attack vector is network-based, requiring no authentication or user interaction, making it highly accessible to remote adversaries. The affected versions include gdm 1.0 and KDE kdm versions 6.2 and 6.4, which were widely used in Linux and Unix-like environments around the year 2000. The vulnerability has a CVSS v2 base score of 10.0, indicating maximum severity with network attack vector, no required authentication, and complete compromise of confidentiality, integrity, and availability. Despite the critical nature, no official patches or fixes are available, increasing the risk for systems still running these versions. Exploits in the wild have not been reported, but the simplicity of the attack vector and the severity of impact make it a significant threat, especially for legacy systems still in operation. The vulnerability affects core components responsible for graphical login management, potentially allowing attackers to gain full control over affected hosts remotely.

Detailed information about CVE-2000-0491: Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to  affecting gnome g

CVE-2000-0491: Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to  - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2000-0491: Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to 

Buffer overflow in MDBMS database server allows remote attackers to execute arbitrary commands via a long string.

CVE-2000-0446 describes a buffer overflow vulnerability in the MDBMS database server, specifically affecting version 0.9_xbx. This vulnerability arises when the server processes an excessively long string input, which overflows the allocated buffer memory. Such a condition allows remote attackers to overwrite adjacent memory regions, potentially enabling them to execute arbitrary commands on the affected system. The vulnerability is exploitable remotely without any authentication, as indicated by the CVSS vector (AV:N/AC:L/Au:N), meaning an attacker can trigger the overflow simply by sending a crafted request over the network. The impact spans confidentiality, integrity, and availability, as arbitrary command execution can lead to data theft, unauthorized data modification, or service disruption. Despite the high severity score of 7.5, no patch is currently available, and no known exploits have been reported in the wild. The MDBMS product is a database management system, and the affected version is relatively old (0.9_xbx), suggesting that modern deployments may be limited. However, any legacy systems still running this version remain at risk. The lack of authentication and ease of exploitation make this vulnerability particularly dangerous, especially in environments where the database server is exposed to untrusted networks.

Detailed information about CVE-2000-0446: Buffer overflow in MDBMS database server allows remote attackers to execute arbitrary commands via a affecting marty_b

CVE-2000-0446: Buffer overflow in MDBMS database server allows remote attackers to execute arbitrary commands via a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2000-0446: Buffer overflow in MDBMS database server allows remote attackers to execute arbitrary commands via a

Buffer overflow in MDaemon POP server allows remote attackers to cause a denial of service via a long user name.

CVE-2000-0399 describes a buffer overflow vulnerability in the MDaemon POP server, specifically affecting versions 3.0.3 and 3.1_beta of the MDaemon mail server software developed by Alt-N Technologies. The vulnerability arises when the POP server processes an excessively long username during the authentication phase. Due to improper bounds checking on the username input, a remote attacker can send a specially crafted long username string that overflows the buffer allocated for this input. This overflow can corrupt adjacent memory, leading to a denial of service (DoS) condition by crashing the POP server process. The vulnerability does not appear to allow for remote code execution or privilege escalation, as the impact is limited to availability disruption. The CVSS score of 5.0 (medium severity) reflects the fact that the attack can be launched remotely (network vector), requires no authentication, and has low attack complexity, but only impacts availability without affecting confidentiality or integrity. No patches or fixes are available for this vulnerability, and there are no known exploits in the wild. The affected MDaemon versions are quite old, dating back to around the year 2000, and the vulnerability specifically targets the POP3 service component of the mail server. Given the age of the software and the nature of the vulnerability, modern versions of MDaemon are unlikely to be affected. However, organizations still running legacy versions may be susceptible to remote DoS attacks that could disrupt email services.

Detailed information about CVE-2000-0399: Buffer overflow in MDaemon POP server allows remote attackers to cause a denial of service via a lon affecting alt-n m

CVE-2000-0399: Buffer overflow in MDaemon POP server allows remote attackers to cause a denial of service via a lon - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2000-0399: Buffer overflow in MDaemon POP server allows remote attackers to cause a denial of service via a lon

Buffer overflow in wconsole.dll in Rockliffe MailSite Management Agent allows remote attackers to execute arbitrary commands via a long query_string parameter in the HTTP GET request.

CVE-2000-0398 is a critical buffer overflow vulnerability found in the wconsole.dll component of Rockliffe's MailSite Management Agent version 4.2.10. This vulnerability arises due to improper handling of the query_string parameter in HTTP GET requests. Specifically, when a remote attacker sends an excessively long query_string parameter, the buffer allocated for this input is overflowed, allowing the attacker to overwrite adjacent memory. This memory corruption can be exploited to execute arbitrary code on the affected system with the privileges of the MailSite Management Agent service. Since the vulnerability is remotely exploitable over the network without any authentication or user interaction, it poses a significant risk. The CVSS v2 base score is 10.0, indicating the highest severity, with attack vector network (AV:N), low attack complexity (AC:L), no authentication required (Au:N), and complete impact on confidentiality, integrity, and availability (C:C/I:C/A:C). No patches or official fixes are available, and there are no known exploits in the wild, likely due to the age of the vulnerability and the product's niche usage. However, the lack of a patch means that affected systems remain vulnerable if still in operation. The vulnerability affects specifically version 4.2.10 of the MailSite product, which is an email server and management solution primarily used in enterprise environments for mail hosting and management.

Detailed information about CVE-2000-0398: Buffer overflow in wconsole.dll in Rockliffe MailSite Management Agent allows remote attackers to ex affecting rocklif

CVE-2000-0398: Buffer overflow in wconsole.dll in Rockliffe MailSite Management Agent allows remote attackers to ex - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2000-0398: Buffer overflow in wconsole.dll in Rockliffe MailSite Management Agent allows remote attackers to ex

Buffer overflow in fdmount on Linux systems allows local users in the "floppy" group to execute arbitrary commands via a long mountpoint parameter.

CVE-2000-0438 is a high-severity buffer overflow vulnerability found in the 'fdmount' utility on Linux systems, specifically affecting various versions of Caldera's OpenLinux distribution. The vulnerability arises when a local user who is a member of the 'floppy' group supplies an excessively long mountpoint parameter to the fdmount program. This input is not properly bounds-checked, leading to a buffer overflow condition. Exploiting this flaw allows the attacker to execute arbitrary commands with the privileges of the fdmount process, which typically runs with elevated permissions to manage floppy disk mounting. The vulnerability requires local access and membership in the 'floppy' group but does not require prior authentication beyond group membership. The CVSS v2 score is 7.2, indicating a high severity, with the vector AV:L/AC:L/Au:N/C:C/I:C/A:C, meaning local attack vector, low attack complexity, no authentication required beyond group membership, and complete confidentiality, integrity, and availability impact. No patches are available for this vulnerability, and there are no known exploits in the wild documented. The affected versions span a wide range of OpenLinux releases from 3.3 through 7.0 and various minor versions, indicating a long-standing issue in this product line. The vulnerability is specifically tied to the fdmount utility, which is used to mount floppy disks, a less common operation in modern environments but potentially relevant in legacy or specialized systems.

Detailed information about CVE-2000-0438: Buffer overflow in fdmount on Linux systems allows local users in the "floppy" group to execute arbi affecting caldera

CVE-2000-0438: Buffer overflow in fdmount on Linux systems allows local users in the "floppy" group to execute arbi - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2000-0438: Buffer overflow in fdmount on Linux systems allows local users in the "floppy" group to execute arbi

Buffer overflow in the ESMTP service of Lotus Domino Server 5.0.1 allows remote attackers to cause a denial of service via a long MAIL FROM command.

CVE-2000-0452 is a medium-severity vulnerability identified in the ESMTP (Extended Simple Mail Transfer Protocol) service of Lotus Domino Server versions 5.0.1, 5.0.2, and 5.0.3. The vulnerability arises from a buffer overflow condition triggered by processing an excessively long MAIL FROM command during the SMTP handshake. Specifically, the ESMTP service does not properly validate or limit the length of the MAIL FROM parameter, allowing a remote attacker to send a specially crafted SMTP request that overflows the buffer. This overflow can cause the server process to crash, resulting in a denial of service (DoS) condition. The vulnerability does not affect confidentiality or integrity directly, as it does not allow code execution or data leakage, but it impacts availability by disrupting mail services. The attack vector is network-based (AV:N), requires no authentication (Au:N), and has low attack complexity (AC:L). No user interaction is required. Despite the age of the vulnerability (published in 2000), the absence of a patch and the presence of affected versions in legacy environments mean that some organizations may still be exposed. No known exploits in the wild have been reported, but the simplicity of the attack vector suggests it could be exploited by attackers with minimal effort. The lack of a patch means mitigation relies on network-level controls and service configuration adjustments. Lotus Domino Server is an enterprise-grade mail and collaboration platform, historically used by organizations for email, calendaring, and workflow applications, making this vulnerability relevant to environments still running these legacy versions.

Detailed information about CVE-2000-0452: Buffer overflow in the ESMTP service of Lotus Domino Server 5.0.1 allows remote attackers to cause a affecting lotus d

CVE-2000-0452: Buffer overflow in the ESMTP service of Lotus Domino Server 5.0.1 allows remote attackers to cause a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2000-0452: Buffer overflow in the ESMTP service of Lotus Domino Server 5.0.1 allows remote attackers to cause a

Buffer overflow in the CyberPatrol daemon "cyberdaemon" used in gauntlet and WebShield allows remote attackers to cause a denial of service or execute arbitrary commands.

CVE-2000-0437 is a critical buffer overflow vulnerability found in the CyberPatrol daemon "cyberdaemon," which is a component used in Network Associates' gauntlet firewall and WebShield products. This vulnerability affects multiple versions of the gauntlet firewall, including versions 4.0, 4.1, 4.2, 5.0, 5.5, as well as versions labeled 100.0 and 300.0. The flaw arises due to improper handling of input data in the cyberdaemon process, allowing a remote attacker to send specially crafted network packets that overflow the buffer. This overflow can lead to arbitrary code execution or cause the daemon to crash, resulting in a denial of service (DoS). The vulnerability is remotely exploitable without requiring any authentication or user interaction, making it highly dangerous. The CVSS v2 base score is 10.0, indicating the highest severity, with an attack vector of network (AV:N), low attack complexity (AC:L), no authentication required (Au:N), and full impact on confidentiality, integrity, and availability (C:C/I:C/A:C). Despite the age of this vulnerability (published in 2000), it remains critical due to the complete compromise potential and lack of available patches. No known exploits in the wild have been reported, but the ease of exploitation and impact severity make it a significant risk for any organization still running affected versions of the gauntlet firewall or WebShield products. The vulnerability is particularly concerning because firewalls and web shields are frontline security devices; compromise could allow attackers to bypass network defenses, pivot internally, or disrupt critical network services.

Detailed information about CVE-2000-0437: Buffer overflow in the CyberPatrol daemon "cyberdaemon" used in gauntlet and WebShield allows remote affecting network

CVE-2000-0437: Buffer overflow in the CyberPatrol daemon "cyberdaemon" used in gauntlet and WebShield allows remote - Live Threat Intelligence - Threat Radar | OffSeq.com

Title	Severity	Type	Source	Date

Threats Tagged 'buffer overflow'

Filter Threats

Threats Tagged 'buffer overflow'

Keyboard Shortcuts

Navigation

Search & Filters

UI Controls

Accessibility