CVEs published April 18, 2000
31 CVEs were published on April 18, 2000: 0 critical, 0 high.
- Published
- 31
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 31
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- zope
- 1
Medium, low and unrated 31
- CVE-1999-0676sdtcm_convert in Solaris 2.6 allows a local user to overwrite sensitive files via a symlink attack.
- CVE-1999-0711The oratclsh interpreter in Oracle 8.x Intelligent Agent for Unix allows local users to execute Tcl commands as root.
- CVE-1999-0720The pt_chown command in Linux allows local users to modify TTY terminal devices that belong to other users.
- CVE-1999-0747Denial of service in BSDi Symmetric Multiprocessing (SMP) when an fstat call is made when the system has a high CPU load.
- CVE-1999-0773Buffer overflow in Solaris lpset program allows local users to gain root access.
- CVE-1999-0790A remote attacker can read information from a Netscape user's cache via JavaScript.
- CVE-1999-0799Buffer overflow in bootpd 2.4.3 and earlier via a long boot file location.
- CVE-1999-0813Cfingerd with ALLOW_EXECUTION enabled does not properly drop privileges when it executes a program on behalf of the user, allowing local use
- CVE-1999-0888dbsnmp in Oracle Intelligent Agent allows local users to gain privileges by setting the ORACLE_HOME environmental variable, which dbsnmp use
- CVE-1999-0903genfilt in the AIX Packet Filtering Module does not properly filter traffic to destination ports greater than 32767.
- CVE-1999-0906Buffer overflow in sccw allows local users to gain root access via the HOME environmental variable.
- CVE-1999-0958sudo 1.5.x allows local users to execute arbitrary commands via a ..
- CVE-1999-0961HPUX sysdiag allows local users to gain root privileges via a symlink attack during log file creation.
- CVE-1999-1008xsoldier program allows local users to gain root access via a long argument.
- CVE-2000-0044Macros in War FTP 1.70 and 1.67b2 allow local or remote attackers to read arbitrary files or execute commands.
- CVE-2000-0052Red Hat userhelper program in the usermode package allows local users to gain root access via PAM and a ..
- CVE-2000-0053Microsoft Commercial Internet System (MCIS) IMAP server allows remote attackers to cause a denial of service via a malformed IMAP request.
- CVE-2000-0057Cold Fusion CFCACHE tag places temporary cache files within the web document root, allowing remote attackers to obtain sensitive system info
- CVE-2000-0062The DTML implementation in the Z Object Publishing Environment (Zope) allows remote attackers to conduct unauthorized activities.zope
- CVE-2000-0073Buffer overflow in Microsoft Rich Text Format (RTF) reader allows attackers to cause a denial of service via a malformed control word.
- CVE-2000-0083HP asecure creates the Audio Security File audio.sec with insecure permissions, which allows local users to cause a denial of service or gai
- CVE-2000-0091Buffer overflow in vchkpw/vpopmail POP authentication package allows remote attackers to gain root privileges via a long username or passwor
- CVE-2000-0095The PMTU discovery procedure used by HP-UX 10.30 and 11.00 for determining the optimum MTU generates large amounts of traffic in response to
- CVE-2000-0099Buffer overflow in UnixWare ppptalk command allows local users to gain privileges via a long prompt argument.
- CVE-2000-0100The SMS Remote Control program is installed with insecure permissions, which allows local users to gain privileges by modifying or replacing
- CVE-2000-0107Linux apcd program allows local attackers to modify arbitrary files via a symlink attack.
- CVE-2000-0131Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands.
- CVE-2000-0140Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service via a large number of connections.
- CVE-2000-0144Axis 700 Network Scanner does not properly restrict access to administrator URLs, which allows users to bypass the password protection via a
- CVE-2000-0159HP Ignite-UX does not save /etc/passwd when it creates an image of a trusted system, which can set the password field to a blank and allow a
- CVE-2000-0183Buffer overflow in ircII 4.4 IRC client allows remote attackers to execute commands via the DCC chat capability.