Exploit-DB RSS Feed

Reddit NetSec

AlienVault OTX General

CVE Database V5

Reddit InfoSec News

ThreatFox MISP Feed

CIRCL OSINT Feed

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The guestbook CGI program in ICQ Web Front service for ICQ 2000a, 99b, and others allows remote attackers to cause a denial of service via a URL with a long name parameter.

CVE-2000-0564 is a vulnerability affecting the guestbook CGI program within the ICQ Web Front service for multiple versions of ICQ, including 2000a, 99b, and earlier releases such as 0.99b_1.1.1.1, 0.99b_v.3.19, 98.0a, 99a_2.15build1701, and 99a_2.21build1800. The vulnerability arises from improper handling of the 'name' parameter in a URL request to the guestbook CGI script. Specifically, when a remote attacker sends a URL containing an excessively long 'name' parameter, the service fails to properly validate or limit the input length, leading to a denial of service (DoS) condition. This DoS manifests as the service becoming unresponsive or crashing, thereby disrupting availability. The vulnerability does not impact confidentiality or integrity, as it does not allow data leakage or unauthorized modification. Exploitation requires no authentication and can be performed remotely over the network, making it relatively easy to exploit. However, the affected software versions are quite old and largely obsolete, with no patches available to remediate the issue. No known exploits have been reported in the wild. The CVSS v2 score is 5.0 (medium severity), reflecting the network vector, low attack complexity, no authentication, no confidentiality or integrity impact, and partial availability impact.

NVD CVE Feed

Detailed information about CVE-2000-0564: The guestbook CGI program in ICQ Web Front service for ICQ 2000a, 99b, and others allows remote atta affecting mirabil

CVE-2000-0564: The guestbook CGI program in ICQ Web Front service for ICQ 2000a, 99b, and others allows remote atta - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2000-0564: The guestbook CGI program in ICQ Web Front service for ICQ 2000a, 99b, and others allows remote atta

The undocumented semconfig system call in BSD freezes the state of semaphores, which allows local users to cause a denial of service of the semaphore system by using the semconfig call.

CVE-2000-0461 describes a vulnerability in the FreeBSD operating system affecting multiple versions ranging from early 1.x releases through 5.0. The issue stems from an undocumented system call named 'semconfig' which manipulates semaphore states. Semaphores are synchronization primitives used to control access to shared resources in concurrent processing environments. The semconfig call can freeze the state of semaphores, effectively halting their normal operation. This freezing leads to a denial of service (DoS) condition within the semaphore subsystem, preventing processes from acquiring or releasing semaphores as intended. The vulnerability requires local user access, meaning an attacker must have some level of access to the system to invoke the semconfig call. There is no indication that authentication is required beyond local access, nor is user interaction beyond executing the call necessary. The vulnerability does not impact confidentiality or integrity but solely affects availability by disrupting semaphore functionality. No patches or fixes are available for this vulnerability, and there are no known exploits in the wild. The CVSS score is low (2.1), reflecting the limited scope and impact of the issue. Given the age of the affected FreeBSD versions, this vulnerability primarily concerns legacy systems still running these outdated releases.

Detailed information about CVE-2000-0461: The undocumented semconfig system call in BSD freezes the state of semaphores, which allows local us affecting freebsd

CVE-2000-0461: The undocumented semconfig system call in BSD freezes the state of semaphores, which allows local us - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2000-0461: The undocumented semconfig system call in BSD freezes the state of semaphores, which allows local us

NetBSD 1.4.2 and earlier allows local users to cause a denial of service by repeatedly running certain system calls in the kernel which do not yield the CPU, aka "cpu-hog".

CVE-2000-0456 is a vulnerability affecting NetBSD versions 1.4.1 and 1.4.2 and earlier. The issue arises from certain system calls within the kernel that, when executed repeatedly by a local user, do not yield CPU time properly. This behavior results in a denial of service (DoS) condition, commonly referred to as a "cpu-hog". Essentially, the affected system calls cause the CPU scheduler to be monopolized by the offending process, preventing other processes from obtaining CPU time and thus degrading system responsiveness or causing it to become unresponsive. The vulnerability requires local user access, meaning an attacker must already have some level of access to the system to exploit it. There is no indication of any impact on confidentiality or integrity, as the vulnerability solely affects availability. The CVSS score of 2.1 (low severity) reflects this limited impact and the requirement for local access. No patches or fixes are available for this vulnerability, and there are no known exploits in the wild. Given the age of the affected NetBSD versions (released around 2000), this vulnerability primarily concerns legacy systems that have not been updated or maintained. Modern NetBSD versions have addressed this issue. The vulnerability is specific to the NetBSD operating system kernel and does not affect other platforms or operating systems.

Detailed information about CVE-2000-0456: NetBSD 1.4.2 and earlier allows local users to cause a denial of service by repeatedly running certa affecting netbsd 

CVE-2000-0456: NetBSD 1.4.2 and earlier allows local users to cause a denial of service by repeatedly running certa - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2000-0456: NetBSD 1.4.2 and earlier allows local users to cause a denial of service by repeatedly running certa

The CIFS Computer Browser service allows remote attackers to cause a denial of service by sending a ResetBrowser frame to the Master Browser, aka the "ResetBrowser Frame" vulnerability.

CVE-2000-0404 is a vulnerability in the CIFS (Common Internet File System) Computer Browser service, specifically affecting Microsoft Terminal Server version 4.0. The vulnerability arises because the Computer Browser service accepts ResetBrowser frames from remote attackers without sufficient validation. By sending a crafted ResetBrowser frame to the Master Browser, an attacker can disrupt the browser election process or force the Master Browser to reset, causing a denial of service (DoS) condition. This results in the temporary loss of network browsing functionality, where clients may be unable to locate or browse shared resources on the network. The vulnerability does not impact confidentiality or integrity but directly affects availability. The CVSS v2 score is 5.0 (medium severity), with an attack vector of network (remote), low attack complexity, no authentication required, and no impact on confidentiality or integrity, only availability. A patch addressing this vulnerability was released by Microsoft in May 2000 (MS00-036). There are no known exploits in the wild reported for this vulnerability, likely due to its age and the availability of patches. However, unpatched legacy systems running Terminal Server 4.0 remain vulnerable to remote DoS attacks that could disrupt network resource discovery and access.

Detailed information about CVE-2000-0404: The CIFS Computer Browser service allows remote attackers to cause a denial of service by sending a  affecting microso

CVE-2000-0404: The CIFS Computer Browser service allows remote attackers to cause a denial of service by sending a  - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2000-0404: The CIFS Computer Browser service allows remote attackers to cause a denial of service by sending a 

The CIFS Computer Browser service on Windows NT 4.0 allows a remote attacker to cause a denial of service by sending a large number of host announcement requests to the master browse tables, aka the "HostAnnouncement Flooding" or "HostAnnouncement Frame" vulnerability.

CVE-2000-0403 is a vulnerability affecting the CIFS (Common Internet File System) Computer Browser service on Microsoft Windows NT 4.0. This service is responsible for maintaining and distributing the master browse list, which allows networked computers to discover and list shared resources within a local network. The vulnerability arises because the service does not properly handle a large volume of host announcement requests. An attacker can exploit this by sending a flood of crafted host announcement packets to the master browser, overwhelming its capacity to process legitimate requests. This results in a denial of service (DoS) condition where the master browser becomes unresponsive or crashes, disrupting the network browsing functionality. The attack requires no authentication and can be performed remotely over the network. The CVSS score assigned is 5.0 (medium severity), reflecting that the impact is limited to availability without affecting confidentiality or integrity. A patch addressing this vulnerability was released by Microsoft in May 2000 (MS00-036). No known exploits have been reported in the wild, but unpatched systems remain vulnerable. Given the age of Windows NT 4.0, this vulnerability primarily affects legacy systems still in operation within certain environments.

Detailed information about CVE-2000-0403: The CIFS Computer Browser service on Windows NT 4.0 allows a remote attacker to cause a denial of se affecting microso

CVE-2000-0403: The CIFS Computer Browser service on Windows NT 4.0 allows a remote attacker to cause a denial of se - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2000-0403: The CIFS Computer Browser service on Windows NT 4.0 allows a remote attacker to cause a denial of se

Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to execute arbitrary commands or cause a denial of service via a long FORWARD_QUERY request.

CVE-2000-0491 is a critical buffer overflow vulnerability found in the X Display Manager Control Protocol (XDMCP) parsing code of several X Window System display managers, specifically GNOME's gdm, KDE's kdm, and wdm. The vulnerability arises when these display managers process a specially crafted FORWARD_QUERY request containing an excessively long input string. Due to improper bounds checking in the XDMCP parsing logic, this input can overflow a buffer allocated on the stack or heap, leading to memory corruption. This memory corruption can be exploited by a remote attacker to execute arbitrary code with the privileges of the display manager process or cause a denial of service (DoS) by crashing the service. The attack vector is network-based, requiring no authentication or user interaction, making it highly accessible to remote adversaries. The affected versions include gdm 1.0 and KDE kdm versions 6.2 and 6.4, which were widely used in Linux and Unix-like environments around the year 2000. The vulnerability has a CVSS v2 base score of 10.0, indicating maximum severity with network attack vector, no required authentication, and complete compromise of confidentiality, integrity, and availability. Despite the critical nature, no official patches or fixes are available, increasing the risk for systems still running these versions. Exploits in the wild have not been reported, but the simplicity of the attack vector and the severity of impact make it a significant threat, especially for legacy systems still in operation. The vulnerability affects core components responsible for graphical login management, potentially allowing attackers to gain full control over affected hosts remotely.

Detailed information about CVE-2000-0491: Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to  affecting gnome g

CVE-2000-0491: Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to  - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2000-0491: Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to 

HP Web JetAdmin 6.0 allows remote attackers to cause a denial of service via a malformed URL to port 8000.

CVE-2000-0444 is a vulnerability found in HP Web JetAdmin version 6.0, a network management software used primarily for managing HP printers and related devices. The vulnerability allows remote attackers to cause a denial of service (DoS) condition by sending a malformed URL request to port 8000, which is the port used by the Web JetAdmin service. This malformed URL input causes the application to crash or become unresponsive, thereby disrupting the management capabilities of the affected system. The vulnerability does not require authentication, making it accessible to any remote attacker who can reach the service on the network. The CVSS score assigned is 5.0 (medium severity), reflecting that the impact is limited to availability (denial of service) without affecting confidentiality or integrity. The attack vector is network-based with low attack complexity and no user interaction required. There is no patch available for this vulnerability, and no known exploits have been reported in the wild. Given the age of the software (version 6.0 dates back to around 2000), it is likely that affected systems are legacy or legacy-compatible environments still in operation within some organizations. The vulnerability specifically targets the Web JetAdmin management interface, which is critical for printer fleet management and monitoring in enterprise environments.

Detailed information about CVE-2000-0444: HP Web JetAdmin 6.0 allows remote attackers to cause a denial of service via a malformed URL to port affecting hp jeta

CVE-2000-0444: HP Web JetAdmin 6.0 allows remote attackers to cause a denial of service via a malformed URL to port - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2000-0444: HP Web JetAdmin 6.0 allows remote attackers to cause a denial of service via a malformed URL to port

Buffer overflow in MDaemon POP server allows remote attackers to cause a denial of service via a long user name.

CVE-2000-0399 describes a buffer overflow vulnerability in the MDaemon POP server, specifically affecting versions 3.0.3 and 3.1_beta of the MDaemon mail server software developed by Alt-N Technologies. The vulnerability arises when the POP server processes an excessively long username during the authentication phase. Due to improper bounds checking on the username input, a remote attacker can send a specially crafted long username string that overflows the buffer allocated for this input. This overflow can corrupt adjacent memory, leading to a denial of service (DoS) condition by crashing the POP server process. The vulnerability does not appear to allow for remote code execution or privilege escalation, as the impact is limited to availability disruption. The CVSS score of 5.0 (medium severity) reflects the fact that the attack can be launched remotely (network vector), requires no authentication, and has low attack complexity, but only impacts availability without affecting confidentiality or integrity. No patches or fixes are available for this vulnerability, and there are no known exploits in the wild. The affected MDaemon versions are quite old, dating back to around the year 2000, and the vulnerability specifically targets the POP3 service component of the mail server. Given the age of the software and the nature of the vulnerability, modern versions of MDaemon are unlikely to be affected. However, organizations still running legacy versions may be susceptible to remote DoS attacks that could disrupt email services.

Detailed information about CVE-2000-0399: Buffer overflow in MDaemon POP server allows remote attackers to cause a denial of service via a lon affecting alt-n m

CVE-2000-0399: Buffer overflow in MDaemon POP server allows remote attackers to cause a denial of service via a lon - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2000-0399: Buffer overflow in MDaemon POP server allows remote attackers to cause a denial of service via a lon

The Cayman 3220-H DSL router allows remote attackers to cause a denial of service via oversized ICMP echo (ping) requests.

CVE-2000-0418 is a vulnerability affecting the Cayman 3220-H DSL router, specifically allowing remote attackers to cause a denial of service (DoS) condition by sending oversized ICMP echo requests (ping packets). The vulnerability arises because the router does not properly handle ICMP packets that exceed expected size limits, leading to resource exhaustion or a crash that disrupts normal router operation. This flaw affects multiple firmware versions, including 1.0, 5.3, 5.3build_r1, 5.3build_r2, 5.5build_r0, and 5.5build_r1. The attack vector is network-based (AV:N), requires no authentication (Au:N), and has low attack complexity (AC:L). The impact is limited to availability (A:P), with no confidentiality or integrity compromise. There is no patch available for this vulnerability, and no known exploits have been reported in the wild. Given the age of the vulnerability (published in 2000), it is likely that affected devices are legacy systems still in operation in some environments. The vulnerability is classified as medium severity with a CVSS score of 5.0, reflecting its moderate impact and ease of exploitation. The primary risk is that attackers can remotely disrupt network connectivity by rendering the router unresponsive, potentially affecting business continuity and network reliability.

Detailed information about CVE-2000-0418: The Cayman 3220-H DSL router allows remote attackers to cause a denial of service via oversized ICMP affecting cayman 

CVE-2000-0418: The Cayman 3220-H DSL router allows remote attackers to cause a denial of service via oversized ICMP - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2000-0418: The Cayman 3220-H DSL router allows remote attackers to cause a denial of service via oversized ICMP

The Intel express 8100 ISDN router allows remote attackers to cause a denial of service via oversized or fragmented ICMP packets.

CVE-2000-0451 is a vulnerability affecting the Intel Express 8100 ISDN router, which allows remote attackers to cause a denial of service (DoS) condition. The attack vector involves sending oversized or fragmented ICMP packets to the router. ICMP (Internet Control Message Protocol) is commonly used for diagnostic or control purposes within IP networks. The vulnerability arises because the router improperly handles these malformed ICMP packets, leading to resource exhaustion or a crash that disrupts normal router operation. Since the attack requires no authentication and can be executed remotely over the network, it poses a significant risk to network availability. The vulnerability does not impact confidentiality or integrity but solely affects availability by causing service interruptions. The CVSS score of 5.0 (medium severity) reflects this limited scope of impact. No patches are available for this vulnerability, and there are no known exploits in the wild, which may be due to the age of the product and its deployment footprint. However, the lack of patching means that affected devices remain vulnerable if still in operation. The Intel Express 8100 router is an older ISDN router model, which may still be in use in legacy network environments or specialized industrial or telecommunications settings. The vulnerability highlights the risks associated with outdated network infrastructure components that do not properly validate or handle malformed network traffic, leading to potential denial of service conditions.

Detailed information about CVE-2000-0451: The Intel express 8100 ISDN router allows remote attackers to cause a denial of service via oversize affecting intel e

CVE-2000-0451: The Intel express 8100 ISDN router allows remote attackers to cause a denial of service via oversize - Live Threat Intelligence - Threat Radar | OffSeq.com

Title	Severity	Type	Source	Date

Threats Tagged 'denial of service'

Filter Threats

Threats Tagged 'denial of service'

Keyboard Shortcuts

Navigation

Search & Filters

UI Controls

Accessibility