CVEs published March 22, 2000
70 CVEs were published on March 22, 2000: 0 critical, 0 high.
- Published
- 70
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 70
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 70
- CVE-1999-0189Solaris rpcbind listens on a high numbered UDP port, which may not be filtered since the standard port number is 111.
- CVE-1999-0390Buffer overflow in Dosemu Slang library in Linux.
- CVE-1999-0678A default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc, which allows remote users to read documentation files
- CVE-1999-0727A kernel leak in the OpenBSD kernel allows IPsec packets to be sent unencrypted.
- CVE-1999-0733Buffer overflow in VMWare 1.0.1 for Linux via a long HOME environmental variable.
- CVE-1999-0740Remote attackers can cause a denial of service on Linux in.telnetd telnet daemon through a malformed TERM environmental variable.
- CVE-1999-0746A default configuration of in.identd in SuSE Linux waits 120 seconds between requests, allowing a remote attacker to conduct a denial of ser
- CVE-1999-0778Buffer overflow in Xi Graphics Accelerated-X server allows local users to gain root access via a long display or query parameter.
- CVE-1999-0783FreeBSD allows local users to conduct a denial of service by creating a hard link from a device special file to a file on an NFS file system
- CVE-1999-0785The INN inndstart program allows local users to gain root privileges via the "pathrun" parameter in the inn.conf file.
- CVE-1999-0786The dynamic linker in Solaris allows a local user to create arbitrary files via the LD_PROFILE environmental variable and a symlink attack.
- CVE-1999-0789Buffer overflow in AIX ftpd in the libc library.
- CVE-1999-0796FreeBSD T/TCP Extensions for Transactions can be subjected to spoofing attacks.
- CVE-1999-0797NIS finger allows an attacker to conduct a denial of service via a large number of finger requests, resulting in a large number of NIS queri
- CVE-1999-0806Buffer overflow in Solaris dtprintinfo program.
- CVE-1999-0890iHTML Merchant allows remote attackers to obtain sensitive information or execute commands via a code parsing error.
- CVE-1999-0893userOsa in SCO OpenServer allows local users to corrupt files via a symlink attack.
- CVE-1999-0896Buffer overflow in RealNetworks RealServer administration utility allows remote attackers to execute arbitrary commands via a long username
- CVE-1999-0908Denial of service in Solaris TCP streams driver via a malicious connection that causes the server to panic as a result of recursive calls to
- CVE-1999-0916WebTrends software stores account names and passwords in a file which does not have restricted access permissions.
- CVE-1999-0920Buffer overflow in the pop-2d POP daemon in the IMAP package allows remote attackers to gain privileges via the FOLD command.
- CVE-1999-0931Buffer overflow in Mediahouse Statistics Server allows remote attackers to execute commands.
- CVE-1999-0964Buffer overflow in FreeBSD setlocale in the libc module allows attackers to execute arbitrary code via a long PATH_LOCALE environment variab
- CVE-1999-0966Buffer overflow in Solaris getopt in libc allows local users to gain root privileges via a long argv[0].
- CVE-1999-0996Buffer overflow in Infoseek Ultraseek search engine allows remote attackers to execute commands via a long GET request.
- CVE-1999-0998Cisco Cache Engine allows an attacker to replace content in the cache.
- CVE-1999-1000The web administration interface for Cisco Cache Engine allows remote attackers to view performance statistics.
- CVE-2000-0003Buffer overflow in UnixWare rtpm program allows local users to gain privileges via a long environmental variable.
- CVE-2000-0022Lotus Domino HTTP server does not properly disable anonymous access for the cgi-bin directory.
- CVE-2000-0023Buffer overflow in Lotus Domino HTTP server allows remote attackers to cause a denial of service via a long URL.
- CVE-2000-0025IIS 4.0 and Site Server 3.0 allow remote attackers to read source code for ASP files if the file is in a virtual directory whose name includ
- CVE-2000-0026Buffer overflow in UnixWare i2odialogd daemon allows remote attackers to gain root access via a long username/password authorization string.
- CVE-2000-0029UnixWare pis and mkpis commands allow local users to gain privileges via a symlink attack.
- CVE-2000-0031The initscripts package in Red Hat Linux allows local users to gain privileges via a symlink attack.
- CVE-2000-0036Outlook Express 5 for Macintosh downloads attachments to HTML mail without prompting the user, aka the "HTML Mail Attachment" vulnerability.
- CVE-2000-0037Majordomo wrapper allows local users to gain privileges by specifying an alternate configuration file.
- CVE-2000-0039AltaVista search engine allows remote attackers to read files above the document root via a ..
- CVE-2000-0040glFtpD allows local users to gain privileges via metacharacters in the SITE ZIPCHK command.
- CVE-2000-0041Macintosh systems generate large ICMP datagrams in response to malformed datagrams, allowing them to be used as amplifiers in a flood attack
- CVE-2000-0088Buffer overflow in the conversion utilities for Japanese, Korean and Chinese Word 5 documents allows an attacker to execute commands, aka th
- CVE-2000-0089The rdisk utility in Microsoft Terminal Server Edition and Windows NT 4.0 stores registry hive information in a temporary file with permissi
- CVE-2000-0097The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argu
- CVE-2000-0098Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file t
- CVE-2000-0121The Recycle Bin utility in Windows NT and Windows 2000 allows local users to read or modify files by creating a subdirectory with the victim
- CVE-2000-0139Internet Anywhere POP3 Mail Server allows local users to cause a denial of service via a malformed RETR command.
- CVE-2000-0145The libguile.so library file used by gnucash in Debian GNU/Linux is installed with world-writable permissions.
- CVE-2000-0148MySQL 3.22 allows remote attackers to bypass password authentication and access a database via a short check string.
- CVE-2000-0149Zeus web server allows remote attackers to view the source code for CGI programs via a null character (%00) at the end of a URL.
- CVE-2000-0150Check Point Firewall-1 allows remote attackers to bypass port access restrictions on an FTP server by forcing it to send malicious packets t
- CVE-2000-0152Remote attackers can cause a denial of service in Novell BorderManager 3.5 by pressing the enter key in a telnet connection to port 2000.
- CVE-2000-0156Internet Explorer 4.x and 5.x allows remote web servers to access files on the client that are outside of its security domain, aka the "Imag
- CVE-2000-0161Sample web sites on Microsoft Site Server 3.0 Commerce Edition do not validate an identification number, which allows remote attackers to ex
- CVE-2000-0162The Microsoft virtual machine (VM) in Internet Explorer 4.x and 5.x allows a remote attacker to read files via a malicious Java applet that
- CVE-2000-0173Vulnerability in the EELS system in SCO UnixWare 7.1.x allows remote attackers to cause a denial of service.
- CVE-2000-0176The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the server by requesting a UR
- CVE-2000-0177DNSTools CGI applications allow remote attackers to execute arbitrary commands via shell metacharacters.
- CVE-2000-0187EZShopper 3.0 loadpage.cgi CGI script allows remote attackers to read arbitrary files via a ..
- CVE-2000-0188EZShopper 3.0 search.cgi CGI script allows remote attackers to read arbitrary files via a ..
- CVE-2000-0190AOL Instant Messenger (AIM) client allows remote attackers to cause a denial of service via a message with a malformed ASCII value.
- CVE-2000-0197The Windows NT scheduler uses the drive mapping of the interactive user who is currently logged onto the system, which allows the local user
- CVE-2000-0198Buffer overflow in POP3 and IMAP servers in the MERCUR mail server suite allows remote attackers to cause a denial of service.
- CVE-2000-0199When a new SQL Server is registered in Enterprise Manager for Microsoft SQL Server 7.0 and the "Always prompt for login name and password" o
- CVE-2000-0203The Trend Micro OfficeScan client tmlisten.exe allows remote attackers to cause a denial of service via malformed data to port 12345.
- CVE-2000-0204The Trend Micro OfficeScan client allows remote attackers to cause a denial of service by making 5 connections to port 12345, which raises C
- CVE-2000-0205Trend Micro OfficeScan allows remote attackers to replay administrative commands and modify the configuration of OfficeScan clients.
- CVE-2000-0213The Sambar server includes batch files ECHO.BAT and HELLO.BAT in the CGI directory, which allow remote attackers to execute commands via she
- CVE-2000-0214FTP Explorer uses weak encryption for storing the username, password, and profile of FTP sites.
- CVE-2000-0216Microsoft email clients in Outlook, Exchange, and Windows Messaging automatically respond to Read Receipt and Delivery Receipt tags, which c
- CVE-2000-0219Red Hat 6.0 allows local users to gain root access by booting single user and hitting ^C at the password prompt.
- CVE-2000-0220ZoneAlarm sends sensitive system and network information in cleartext to the Zone Labs server if a user requests more information about an e