CVE-2000-0334

LowCVSS 2.1/10Last modified Jun 16, 2026

Description

The Allaire Spectra container editor preview tool does not properly enforce object security, which allows an attacker to conduct unauthorized activities via an object-method that is added to the container object with a publishing rule.

Metrics

CVSS 2.0 2.1/10AV:L/AC:L/Au:N/C:P/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.allaire.com/handlers/index.cfm?ID=15411&Method=FullPatch, Vendor Advisory
http://www.securityfocus.com/bid/1181
http://www.allaire.com/handlers/index.cfm?ID=15411&Method=FullPatch, Vendor Advisory
http://www.securityfocus.com/bid/1181

Timeline

Published: Apr 24, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-03357.5The resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS query results.CVE-2000-03362.1Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack.CVE-2000-03377.2Buffer overflow in Xsun X server in Solaris 7 allows local users to gain root privileges via a long -dev parameter.CVE-2000-03385.5Concurrent Versions Software (CVS) uses predictable temporary file names for locking, which allows local users to cause a denial of service CVE-2000-03397.5ZoneAlarm 2.1.10 and earlier does not filter UDP packets with a source port of 67, which allows remote attackers to bypass the firewall rule CVE-2000-03407.2Buffer overflow in Gnomelib in SuSE Linux 6.3 allows local users to execute arbitrary commands via the DISPLAY environmental variable.CVE-2000-03415.0ATRIUM Cassandra NNTP Server 1.10 allows remote attackers to cause a denial of service via a long login name.CVE-2000-03427.5Eudora 4.x allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by using a .lnk file t CVE-2000-034310.0Buffer overflow in Sniffit 0.3.x with the -L logging option enabled allows remote attackers to execute arbitrary commands via a long MAIL FR CVE-2000-03445.0The knfsd NFS server in Linux kernel 2.2.x allows remote attackers to cause a denial of service via a negative size value.CVE-2000-03452.1The on-line help system options in Cisco routers allows non-privileged users without "enabled" access to obtain sensitive information via th CVE-2000-03465.0AppleShare IP 6.1 and later allows a remote attacker to read potentially sensitive information via an invalid range request to the web serve