# CVEs published 2000-03-22

70 CVEs were published on March 22, 2000: 0 critical, 0 high. Days are UTC.

- [CVE-1999-0189](https://cve.now/CVE-1999-0189.md): Solaris rpcbind listens on a high numbered UDP port, which may not be filtered since the standard port number is 111. (no CVSS)
- [CVE-1999-0390](https://cve.now/CVE-1999-0390.md): Buffer overflow in Dosemu Slang library in Linux. (no CVSS)
- [CVE-1999-0678](https://cve.now/CVE-1999-0678.md): A default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc, which allows remote users to read documentation files (no CVSS)
- [CVE-1999-0727](https://cve.now/CVE-1999-0727.md): A kernel leak in the OpenBSD kernel allows IPsec packets to be sent unencrypted. (no CVSS)
- [CVE-1999-0733](https://cve.now/CVE-1999-0733.md): Buffer overflow in VMWare 1.0.1 for Linux via a long HOME environmental variable. (no CVSS)
- [CVE-1999-0740](https://cve.now/CVE-1999-0740.md): Remote attackers can cause a denial of service on Linux in.telnetd telnet daemon through a malformed TERM environmental variable. (no CVSS)
- [CVE-1999-0746](https://cve.now/CVE-1999-0746.md): A default configuration of in.identd in SuSE Linux waits 120 seconds between requests, allowing a remote attacker to conduct a denial of ser (no CVSS)
- [CVE-1999-0778](https://cve.now/CVE-1999-0778.md): Buffer overflow in Xi Graphics Accelerated-X server allows local users to gain root access via a long display or query parameter. (no CVSS)
- [CVE-1999-0783](https://cve.now/CVE-1999-0783.md): FreeBSD allows local users to conduct a denial of service by creating a hard link from a device special file to a file on an NFS file system (no CVSS)
- [CVE-1999-0785](https://cve.now/CVE-1999-0785.md): The INN inndstart program allows local users to gain root privileges via the "pathrun" parameter in the inn.conf file. (no CVSS)
- [CVE-1999-0786](https://cve.now/CVE-1999-0786.md): The dynamic linker in Solaris allows a local user to create arbitrary files via the LD\_PROFILE environmental variable and a symlink attack. (no CVSS)
- [CVE-1999-0789](https://cve.now/CVE-1999-0789.md): Buffer overflow in AIX ftpd in the libc library. (no CVSS)
- [CVE-1999-0796](https://cve.now/CVE-1999-0796.md): FreeBSD T/TCP Extensions for Transactions can be subjected to spoofing attacks. (no CVSS)
- [CVE-1999-0797](https://cve.now/CVE-1999-0797.md): NIS finger allows an attacker to conduct a denial of service via a large number of finger requests, resulting in a large number of NIS queri (no CVSS)
- [CVE-1999-0806](https://cve.now/CVE-1999-0806.md): Buffer overflow in Solaris dtprintinfo program. (no CVSS)
- [CVE-1999-0890](https://cve.now/CVE-1999-0890.md): iHTML Merchant allows remote attackers to obtain sensitive information or execute commands via a code parsing error. (no CVSS)
- [CVE-1999-0893](https://cve.now/CVE-1999-0893.md): userOsa in SCO OpenServer allows local users to corrupt files via a symlink attack. (no CVSS)
- [CVE-1999-0896](https://cve.now/CVE-1999-0896.md): Buffer overflow in RealNetworks RealServer administration utility allows remote attackers to execute arbitrary commands via a long username (no CVSS)
- [CVE-1999-0908](https://cve.now/CVE-1999-0908.md): Denial of service in Solaris TCP streams driver via a malicious connection that causes the server to panic as a result of recursive calls to (no CVSS)
- [CVE-1999-0916](https://cve.now/CVE-1999-0916.md): WebTrends software stores account names and passwords in a file which does not have restricted access permissions. (no CVSS)
- [CVE-1999-0920](https://cve.now/CVE-1999-0920.md): Buffer overflow in the pop-2d POP daemon in the IMAP package allows remote attackers to gain privileges via the FOLD command. (no CVSS)
- [CVE-1999-0931](https://cve.now/CVE-1999-0931.md): Buffer overflow in Mediahouse Statistics Server allows remote attackers to execute commands. (no CVSS)
- [CVE-1999-0964](https://cve.now/CVE-1999-0964.md): Buffer overflow in FreeBSD setlocale in the libc module allows attackers to execute arbitrary code via a long PATH\_LOCALE environment variab (no CVSS)
- [CVE-1999-0966](https://cve.now/CVE-1999-0966.md): Buffer overflow in Solaris getopt in libc allows local users to gain root privileges via a long argv\[0\]. (no CVSS)
- [CVE-1999-0996](https://cve.now/CVE-1999-0996.md): Buffer overflow in Infoseek Ultraseek search engine allows remote attackers to execute commands via a long GET request. (no CVSS)
- [CVE-1999-0998](https://cve.now/CVE-1999-0998.md): Cisco Cache Engine allows an attacker to replace content in the cache. (no CVSS)
- [CVE-1999-1000](https://cve.now/CVE-1999-1000.md): The web administration interface for Cisco Cache Engine allows remote attackers to view performance statistics. (no CVSS)
- [CVE-2000-0003](https://cve.now/CVE-2000-0003.md): Buffer overflow in UnixWare rtpm program allows local users to gain privileges via a long environmental variable. (no CVSS)
- [CVE-2000-0022](https://cve.now/CVE-2000-0022.md): Lotus Domino HTTP server does not properly disable anonymous access for the cgi-bin directory. (no CVSS)
- [CVE-2000-0023](https://cve.now/CVE-2000-0023.md): Buffer overflow in Lotus Domino HTTP server allows remote attackers to cause a denial of service via a long URL. (no CVSS)
- [CVE-2000-0025](https://cve.now/CVE-2000-0025.md): IIS 4.0 and Site Server 3.0 allow remote attackers to read source code for ASP files if the file is in a virtual directory whose name includ (no CVSS)
- [CVE-2000-0026](https://cve.now/CVE-2000-0026.md): Buffer overflow in UnixWare i2odialogd daemon allows remote attackers to gain root access via a long username/password authorization string. (no CVSS)
- [CVE-2000-0029](https://cve.now/CVE-2000-0029.md): UnixWare pis and mkpis commands allow local users to gain privileges via a symlink attack. (no CVSS)
- [CVE-2000-0031](https://cve.now/CVE-2000-0031.md): The initscripts package in Red Hat Linux allows local users to gain privileges via a symlink attack. (no CVSS)
- [CVE-2000-0036](https://cve.now/CVE-2000-0036.md): Outlook Express 5 for Macintosh downloads attachments to HTML mail without prompting the user, aka the "HTML Mail Attachment" vulnerability. (no CVSS)
- [CVE-2000-0037](https://cve.now/CVE-2000-0037.md): Majordomo wrapper allows local users to gain privileges by specifying an alternate configuration file. (no CVSS)
- [CVE-2000-0039](https://cve.now/CVE-2000-0039.md): AltaVista search engine allows remote attackers to read files above the document root via a .. (no CVSS)
- [CVE-2000-0040](https://cve.now/CVE-2000-0040.md): glFtpD allows local users to gain privileges via metacharacters in the SITE ZIPCHK command. (no CVSS)
- [CVE-2000-0041](https://cve.now/CVE-2000-0041.md): Macintosh systems generate large ICMP datagrams in response to malformed datagrams, allowing them to be used as amplifiers in a flood attack (no CVSS)
- [CVE-2000-0088](https://cve.now/CVE-2000-0088.md): Buffer overflow in the conversion utilities for Japanese, Korean and Chinese Word 5 documents allows an attacker to execute commands, aka th (no CVSS)
- [CVE-2000-0089](https://cve.now/CVE-2000-0089.md): The rdisk utility in Microsoft Terminal Server Edition and Windows NT 4.0 stores registry hive information in a temporary file with permissi (no CVSS)
- [CVE-2000-0097](https://cve.now/CVE-2000-0097.md): The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argu (no CVSS)
- [CVE-2000-0098](https://cve.now/CVE-2000-0098.md): Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file t (no CVSS)
- [CVE-2000-0121](https://cve.now/CVE-2000-0121.md): The Recycle Bin utility in Windows NT and Windows 2000 allows local users to read or modify files by creating a subdirectory with the victim (no CVSS)
- [CVE-2000-0139](https://cve.now/CVE-2000-0139.md): Internet Anywhere POP3 Mail Server allows local users to cause a denial of service via a malformed RETR command. (no CVSS)
- [CVE-2000-0145](https://cve.now/CVE-2000-0145.md): The libguile.so library file used by gnucash in Debian GNU/Linux is installed with world-writable permissions. (no CVSS)
- [CVE-2000-0148](https://cve.now/CVE-2000-0148.md): MySQL 3.22 allows remote attackers to bypass password authentication and access a database via a short check string. (no CVSS)
- [CVE-2000-0149](https://cve.now/CVE-2000-0149.md): Zeus web server allows remote attackers to view the source code for CGI programs via a null character (%00) at the end of a URL. (no CVSS)
- [CVE-2000-0150](https://cve.now/CVE-2000-0150.md): Check Point Firewall-1 allows remote attackers to bypass port access restrictions on an FTP server by forcing it to send malicious packets t (no CVSS)
- [CVE-2000-0152](https://cve.now/CVE-2000-0152.md): Remote attackers can cause a denial of service in Novell BorderManager 3.5 by pressing the enter key in a telnet connection to port 2000. (no CVSS)
- [CVE-2000-0156](https://cve.now/CVE-2000-0156.md): Internet Explorer 4.x and 5.x allows remote web servers to access files on the client that are outside of its security domain, aka the "Imag (no CVSS)
- [CVE-2000-0161](https://cve.now/CVE-2000-0161.md): Sample web sites on Microsoft Site Server 3.0 Commerce Edition do not validate an identification number, which allows remote attackers to ex (no CVSS)
- [CVE-2000-0162](https://cve.now/CVE-2000-0162.md): The Microsoft virtual machine (VM) in Internet Explorer 4.x and 5.x allows a remote attacker to read files via a malicious Java applet that (no CVSS)
- [CVE-2000-0173](https://cve.now/CVE-2000-0173.md): Vulnerability in the EELS system in SCO UnixWare 7.1.x allows remote attackers to cause a denial of service. (no CVSS)
- [CVE-2000-0176](https://cve.now/CVE-2000-0176.md): The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the server by requesting a UR (no CVSS)
- [CVE-2000-0177](https://cve.now/CVE-2000-0177.md): DNSTools CGI applications allow remote attackers to execute arbitrary commands via shell metacharacters. (no CVSS)
- [CVE-2000-0187](https://cve.now/CVE-2000-0187.md): EZShopper 3.0 loadpage.cgi CGI script allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2000-0188](https://cve.now/CVE-2000-0188.md): EZShopper 3.0 search.cgi CGI script allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2000-0190](https://cve.now/CVE-2000-0190.md): AOL Instant Messenger (AIM) client allows remote attackers to cause a denial of service via a message with a malformed ASCII value. (no CVSS)
- [CVE-2000-0197](https://cve.now/CVE-2000-0197.md): The Windows NT scheduler uses the drive mapping of the interactive user who is currently logged onto the system, which allows the local user (no CVSS)
- [CVE-2000-0198](https://cve.now/CVE-2000-0198.md): Buffer overflow in POP3 and IMAP servers in the MERCUR mail server suite allows remote attackers to cause a denial of service. (no CVSS)
- [CVE-2000-0199](https://cve.now/CVE-2000-0199.md): When a new SQL Server is registered in Enterprise Manager for Microsoft SQL Server 7.0 and the "Always prompt for login name and password" o (no CVSS)
- [CVE-2000-0203](https://cve.now/CVE-2000-0203.md): The Trend Micro OfficeScan client tmlisten.exe allows remote attackers to cause a denial of service via malformed data to port 12345. (no CVSS)
- [CVE-2000-0204](https://cve.now/CVE-2000-0204.md): The Trend Micro OfficeScan client allows remote attackers to cause a denial of service by making 5 connections to port 12345, which raises C (no CVSS)
- [CVE-2000-0205](https://cve.now/CVE-2000-0205.md): Trend Micro OfficeScan allows remote attackers to replay administrative commands and modify the configuration of OfficeScan clients. (no CVSS)
- [CVE-2000-0213](https://cve.now/CVE-2000-0213.md): The Sambar server includes batch files ECHO.BAT and HELLO.BAT in the CGI directory, which allow remote attackers to execute commands via she (no CVSS)
- [CVE-2000-0214](https://cve.now/CVE-2000-0214.md): FTP Explorer uses weak encryption for storing the username, password, and profile of FTP sites. (no CVSS)
- [CVE-2000-0216](https://cve.now/CVE-2000-0216.md): Microsoft email clients in Outlook, Exchange, and Windows Messaging automatically respond to Read Receipt and Delivery Receipt tags, which c (no CVSS)
- [CVE-2000-0219](https://cve.now/CVE-2000-0219.md): Red Hat 6.0 allows local users to gain root access by booting single user and hitting ^C at the password prompt. (no CVSS)
- [CVE-2000-0220](https://cve.now/CVE-2000-0220.md): ZoneAlarm sends sensitive system and network information in cleartext to the Zone Labs server if a user requests more information about an e (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2000-03-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.