# CVEs published 2000-04-18

31 CVEs were published on April 18, 2000: 0 critical, 0 high. Days are UTC.

- [CVE-1999-0676](https://cve.now/CVE-1999-0676.md): sdtcm\_convert in Solaris 2.6 allows a local user to overwrite sensitive files via a symlink attack. (no CVSS)
- [CVE-1999-0711](https://cve.now/CVE-1999-0711.md): The oratclsh interpreter in Oracle 8.x Intelligent Agent for Unix allows local users to execute Tcl commands as root. (no CVSS)
- [CVE-1999-0720](https://cve.now/CVE-1999-0720.md): The pt\_chown command in Linux allows local users to modify TTY terminal devices that belong to other users. (no CVSS)
- [CVE-1999-0747](https://cve.now/CVE-1999-0747.md): Denial of service in BSDi Symmetric Multiprocessing (SMP) when an fstat call is made when the system has a high CPU load. (no CVSS)
- [CVE-1999-0773](https://cve.now/CVE-1999-0773.md): Buffer overflow in Solaris lpset program allows local users to gain root access. (no CVSS)
- [CVE-1999-0790](https://cve.now/CVE-1999-0790.md): A remote attacker can read information from a Netscape user's cache via JavaScript. (no CVSS)
- [CVE-1999-0799](https://cve.now/CVE-1999-0799.md): Buffer overflow in bootpd 2.4.3 and earlier via a long boot file location. (no CVSS)
- [CVE-1999-0813](https://cve.now/CVE-1999-0813.md): Cfingerd with ALLOW\_EXECUTION enabled does not properly drop privileges when it executes a program on behalf of the user, allowing local use (no CVSS)
- [CVE-1999-0888](https://cve.now/CVE-1999-0888.md): dbsnmp in Oracle Intelligent Agent allows local users to gain privileges by setting the ORACLE\_HOME environmental variable, which dbsnmp use (no CVSS)
- [CVE-1999-0903](https://cve.now/CVE-1999-0903.md): genfilt in the AIX Packet Filtering Module does not properly filter traffic to destination ports greater than 32767. (no CVSS)
- [CVE-1999-0906](https://cve.now/CVE-1999-0906.md): Buffer overflow in sccw allows local users to gain root access via the HOME environmental variable. (no CVSS)
- [CVE-1999-0958](https://cve.now/CVE-1999-0958.md): sudo 1.5.x allows local users to execute arbitrary commands via a .. (no CVSS)
- [CVE-1999-0961](https://cve.now/CVE-1999-0961.md): HPUX sysdiag allows local users to gain root privileges via a symlink attack during log file creation. (no CVSS)
- [CVE-1999-1008](https://cve.now/CVE-1999-1008.md): xsoldier program allows local users to gain root access via a long argument. (no CVSS)
- [CVE-2000-0044](https://cve.now/CVE-2000-0044.md): Macros in War FTP 1.70 and 1.67b2 allow local or remote attackers to read arbitrary files or execute commands. (no CVSS)
- [CVE-2000-0052](https://cve.now/CVE-2000-0052.md): Red Hat userhelper program in the usermode package allows local users to gain root access via PAM and a .. (no CVSS)
- [CVE-2000-0053](https://cve.now/CVE-2000-0053.md): Microsoft Commercial Internet System (MCIS) IMAP server allows remote attackers to cause a denial of service via a malformed IMAP request. (no CVSS)
- [CVE-2000-0057](https://cve.now/CVE-2000-0057.md): Cold Fusion CFCACHE tag places temporary cache files within the web document root, allowing remote attackers to obtain sensitive system info (no CVSS)
- [CVE-2000-0062](https://cve.now/CVE-2000-0062.md): The DTML implementation in the Z Object Publishing Environment (Zope) allows remote attackers to conduct unauthorized activities. (no CVSS, zope)
- [CVE-2000-0073](https://cve.now/CVE-2000-0073.md): Buffer overflow in Microsoft Rich Text Format (RTF) reader allows attackers to cause a denial of service via a malformed control word. (no CVSS)
- [CVE-2000-0083](https://cve.now/CVE-2000-0083.md): HP asecure creates the Audio Security File audio.sec with insecure permissions, which allows local users to cause a denial of service or gai (no CVSS)
- [CVE-2000-0091](https://cve.now/CVE-2000-0091.md): Buffer overflow in vchkpw/vpopmail POP authentication package allows remote attackers to gain root privileges via a long username or passwor (no CVSS)
- [CVE-2000-0095](https://cve.now/CVE-2000-0095.md): The PMTU discovery procedure used by HP-UX 10.30 and 11.00 for determining the optimum MTU generates large amounts of traffic in response to (no CVSS)
- [CVE-2000-0099](https://cve.now/CVE-2000-0099.md): Buffer overflow in UnixWare ppptalk command allows local users to gain privileges via a long prompt argument. (no CVSS)
- [CVE-2000-0100](https://cve.now/CVE-2000-0100.md): The SMS Remote Control program is installed with insecure permissions, which allows local users to gain privileges by modifying or replacing (no CVSS)
- [CVE-2000-0107](https://cve.now/CVE-2000-0107.md): Linux apcd program allows local attackers to modify arbitrary files via a symlink attack. (no CVSS)
- [CVE-2000-0131](https://cve.now/CVE-2000-0131.md): Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands. (no CVSS)
- [CVE-2000-0140](https://cve.now/CVE-2000-0140.md): Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service via a large number of connections. (no CVSS)
- [CVE-2000-0144](https://cve.now/CVE-2000-0144.md): Axis 700 Network Scanner does not properly restrict access to administrator URLs, which allows users to bypass the password protection via a (no CVSS)
- [CVE-2000-0159](https://cve.now/CVE-2000-0159.md): HP Ignite-UX does not save /etc/passwd when it creates an image of a trusted system, which can set the password field to a blank and allow a (no CVSS)
- [CVE-2000-0183](https://cve.now/CVE-2000-0183.md): Buffer overflow in ircII 4.4 IRC client allows remote attackers to execute commands via the DCC chat capability. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2000-04-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.