CVEs published April 25, 2000
34 CVEs were published on April 25, 2000: 0 critical, 0 high.
- Published
- 34
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 34
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 34
- CVE-1999-0203In Sendmail, attackers can gain root privileges via SMTP by specifying an improper "mail from" address and an invalid "rcpt to" address that
- CVE-1999-0780KDE klock allows local users to kill arbitrary processes by specifying an arbitrary PID in the .kss.pid file.
- CVE-1999-0781KDE allows local users to execute arbitrary commands by setting the KDEDIR environmental variable to modify the search path that KDE uses to
- CVE-1999-0782KDE kppp allows local users to create a directory in an arbitrary location via the HOME environmental variable.
- CVE-1999-0803The fwluser script in AIX eNetwork Firewall allows local users to write to arbitrary files via a symlink attack.
- CVE-1999-0824A Windows NT user can use SUBST to map a drive letter to a folder, which is not unmapped after the user logs off, potentially allowing that
- CVE-1999-0889Cisco 675 routers running CBOS allow remote attackers to establish telnet sessions if an exec or superuser password has not been set.
- CVE-1999-0895Firewall-1 does not properly restrict access to LDAP attributes.
- CVE-1999-0897iChat ROOMS Webserver allows remote attackers to read arbitrary files via a ..
- CVE-1999-0950Buffer overflow in WFTPD FTP server allows remote attackers to gain root access via a series of MKD and CWD commands that create nested dire
- CVE-1999-0957MajorCool mj_key_cache program allows local users to modify files via a symlink attack.
- CVE-1999-0997wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to th
- CVE-1999-1005Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a ..
- CVE-1999-1007Buffer overflow in VDO Live Player allows remote attackers to execute commands on the VDO client via a malformed .vdo file.
- CVE-1999-1010An SSH 1.2.27 server allows a client to use the "none" cipher, even if it is not allowed by the server policy.
- CVE-2000-0010WebWho+ whois.cgi program allows remote attackers to execute commands via shell metacharacters in the TLD parameter.
- CVE-2000-0012Buffer overflow in w3-msql CGI program in miniSQL package allows remote attackers to execute commands.
- CVE-2000-0014Denial of service in Savant web server via a null character in the requested URL.
- CVE-2000-0020DNS PRO allows remote attackers to conduct a denial of service via a large number of connections.
- CVE-2000-0024IIS does not properly canonicalize URLs, potentially allowing remote attackers to bypass access restrictions in third-party software via esc
- CVE-2000-0033InterScan VirusWall SMTP scanner does not properly scan messages with malformed attachments.
- CVE-2000-0042Buffer overflow in CSM mail server allows remote attackers to cause a denial of service or execute commands via a long HELO command.
- CVE-2000-0043Buffer overflow in CamShot WebCam HTTP server allows remote attackers to execute commands via a long GET request.
- CVE-2000-0050The Allaire Spectra Webtop allows authenticated users to access other Webtop sections by specifying explicit URLs.
- CVE-2000-0051The Allaire Spectra Configuration Wizard allows remote attackers to cause a denial of service by repeatedly resubmitting data collections fo
- CVE-2000-0070NtImpersonateClientOfPort local procedure call in Windows NT 4.0 allows local users to gain privileges, aka "Spoofed LPC Port Request."
- CVE-2000-0112The default installation of Debian GNU/Linux uses an insecure Master Boot Record (MBR) which allows a local user to boot from a floppy disk
- CVE-2000-0165The Delegate application proxy has several buffer overflows which allow a remote attacker to execute commands.
- CVE-2000-0181Firewall-1 3.0 and 4.0 leaks packets with private IP address information, which could allow remote attackers to determine the real IP addres
- CVE-2000-0184Linux printtool sets the permissions of printer configuration files to be world-readable, which allows local attackers to obtain printer sha
- CVE-2000-0185RealMedia RealServer reveals the real IP address of a Real Server, even if the address is supposed to be private.
- CVE-2000-0192The default installation of Caldera OpenLinux 2.3 includes the CGI program rpm_query, which allows remote attackers to determine what packag
- CVE-2000-0206The installation of Oracle 8.1.5.x on Linux follows symlinks and creates the orainstRoot.sh file with world-writeable permissions, which all
- CVE-2000-0223Buffer overflow in the wmcdplay CD player program for the WindowMaker desktop allows local users to gain root privileges via a long paramete