CVEs published April 10, 2000
23 CVEs were published on April 10, 2000: 0 critical, 0 high.
- Published
- 23
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 23
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 23
- CVE-2000-0170Buffer overflow in the man program in Linux allows local users to gain privileges via the MANPAGER environmental variable.
- CVE-2000-0172The mtr program only uses a seteuid call when attempting to drop privileges, which could allow local users to gain root privileges.
- CVE-2000-0178ServerIron switches by Foundry Networks have predictable TCP/IP sequence numbers, which allows remote attackers to spoof or hijack sessions.
- CVE-2000-0182iPlanet Web Server 4.1 allows remote attackers to cause a denial of service via a large number of GET commands, which consumes memory and ca
- CVE-2000-0186Buffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long command line argumen
- CVE-2000-0189ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onr
- CVE-2000-0194buildxconf in Corel Linux allows local users to modify or create arbitrary files via the -x or -f parameters.
- CVE-2000-0196Buffer overflow in mhshow in the Linux nmh package allows remote attackers to execute commands via malformed MIME headers in an email messag
- CVE-2000-0200Buffer overflow in Microsoft Clip Art Gallery allows remote attackers to cause a denial of service or execute commands via a malformed CIL (
- CVE-2000-0201The window.showHelp() method in Internet Explorer 5.x does not restrict HTML help files (.chm) to be executed from the local host, which all
- CVE-2000-0202Microsoft SQL Server 7.0 and Microsoft Data Engine (MSDE) 1.0 allow remote attackers to gain privileges via a malformed Select statement in
- CVE-2000-0207SGI InfoSearch CGI program infosrch.cgi allows remote attackers to execute commands via shell metacharacters.
- CVE-2000-0208The htdig (ht://Dig) CGI program htsearch allows remote attackers to read arbitrary files by enclosing the file name with backticks (`) in p
- CVE-2000-0209Buffer overflow in Lynx 2.x allows remote attackers to crash Lynx and possibly execute commands via a long URL in a malicious web page.
- CVE-2000-0210The lit program in Sun Flex License Manager (FlexLM) follows symlinks, which allows local users to modify arbitrary files.
- CVE-2000-0211The Windows Media server allows remote attackers to cause a denial of service via a series of client handshake packets that are sent in an i
- CVE-2000-0212InterAccess TelnetD Server 4.0 allows remote attackers to conduct a denial of service via malformed terminal client configuration informatio
- CVE-2000-0215Vulnerability in SCO cu program in UnixWare 7.x allows local users to gain privileges.
- CVE-2000-0217The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious x
- CVE-2000-0218Buffer overflow in Linux mount and umount allows local users to gain root privileges via a long relative pathname.
- CVE-2000-0221The Nautica Marlin bridge allows remote attackers to cause a denial of service via a zero length UDP packet to the SNMP port.
- CVE-2000-0222The installation for Windows 2000 does not activate the Administrator password until the system has rebooted, which allows remote attackers
- CVE-2000-0224ARCserve agent in SCO UnixWare 7.x allows local attackers to gain root privileges via a symlink attack.