CVE-2000-0539

MediumCVSS 6.4/10Last modified Jun 16, 2026

Description

Servlet examples in Allaire JRun 2.3.x allow remote attackers to obtain sensitive information, e.g. listing HttpSession ID's via the SessionServlet servlet.

Metrics

CVSS 2.0 6.4/10AV:N/AC:L/Au:N/C:P/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.allaire.com/handlers/index.cfm?ID=16290&Method=FullPatch, Vendor Advisory
http://www.osvdb.org/818
http://www.securityfocus.com/bid/1386Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/4774
http://www.allaire.com/handlers/index.cfm?ID=16290&Method=FullPatch, Vendor Advisory
http://www.osvdb.org/818
http://www.securityfocus.com/bid/1386Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/4774

Timeline

Published: Jun 22, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-05405.0JSP sample files in Allaire JRun 2.3.x allow remote attackers to access arbitrary files (e.g. via viewsource.jsp) or obtain configuration in CVE-2000-05417.2The Panda Antivirus console on port 2001 allows local users to execute arbitrary commands without authentication via the CMD command.CVE-2000-05425.0Tigris remote access server before 11.5.4.22 does not properly record Radius accounting information when a user fails the initial login auth CVE-2000-05435.0The command port for PGP Certificate Server 2.5.0 and 2.5.1 allows remote attackers to cause a denial of service if their hostname does not CVE-2000-05445.0Windows NT and Windows 2000 hosts allow a remote attacker to cause a denial of service via malformed DCE/RPC SMBwriteX requests that contain CVE-2000-05454.6Buffer overflow in mailx mail command (aka Mail) on Linux systems allows local users to gain privileges via a long -c (carbon copy) paramete CVE-2000-05465.0Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the lastrealm variable in the set_tgtkey CVE-2000-05475.0Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the localrealm variable in the process_v4 CVE-2000-05485.0Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the e_msg variable in the kerb_err_reply CVE-2000-05495.0Kerberos 4 KDC program does not properly check for null termination of AUTH_MSG_KDC_REQUEST requests, which allows remote attackers to cause CVE-2000-05505.0Kerberos 4 KDC program improperly frees memory twice (aka "double-free"), which allows remote attackers to cause a denial of service.CVE-2000-055110.0The file transfer mechanism in Danware NetOp 6.0 does not provide authentication, which allows remote attackers to access and modify arbitra