# CVEs published 2000-04-25

34 CVEs were published on April 25, 2000: 0 critical, 0 high. Days are UTC.

- [CVE-1999-0203](https://cve.now/CVE-1999-0203.md): In Sendmail, attackers can gain root privileges via SMTP by specifying an improper "mail from" address and an invalid "rcpt to" address that (no CVSS)
- [CVE-1999-0780](https://cve.now/CVE-1999-0780.md): KDE klock allows local users to kill arbitrary processes by specifying an arbitrary PID in the .kss.pid file. (no CVSS)
- [CVE-1999-0781](https://cve.now/CVE-1999-0781.md): KDE allows local users to execute arbitrary commands by setting the KDEDIR environmental variable to modify the search path that KDE uses to (no CVSS)
- [CVE-1999-0782](https://cve.now/CVE-1999-0782.md): KDE kppp allows local users to create a directory in an arbitrary location via the HOME environmental variable. (no CVSS)
- [CVE-1999-0803](https://cve.now/CVE-1999-0803.md): The fwluser script in AIX eNetwork Firewall allows local users to write to arbitrary files via a symlink attack. (no CVSS)
- [CVE-1999-0824](https://cve.now/CVE-1999-0824.md): A Windows NT user can use SUBST to map a drive letter to a folder, which is not unmapped after the user logs off, potentially allowing that (no CVSS)
- [CVE-1999-0889](https://cve.now/CVE-1999-0889.md): Cisco 675 routers running CBOS allow remote attackers to establish telnet sessions if an exec or superuser password has not been set. (no CVSS)
- [CVE-1999-0895](https://cve.now/CVE-1999-0895.md): Firewall-1 does not properly restrict access to LDAP attributes. (no CVSS)
- [CVE-1999-0897](https://cve.now/CVE-1999-0897.md): iChat ROOMS Webserver allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-1999-0950](https://cve.now/CVE-1999-0950.md): Buffer overflow in WFTPD FTP server allows remote attackers to gain root access via a series of MKD and CWD commands that create nested dire (no CVSS)
- [CVE-1999-0957](https://cve.now/CVE-1999-0957.md): MajorCool mj\_key\_cache program allows local users to modify files via a symlink attack. (no CVSS)
- [CVE-1999-0997](https://cve.now/CVE-1999-0997.md): wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to th (no CVSS)
- [CVE-1999-1005](https://cve.now/CVE-1999-1005.md): Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. (no CVSS)
- [CVE-1999-1007](https://cve.now/CVE-1999-1007.md): Buffer overflow in VDO Live Player allows remote attackers to execute commands on the VDO client via a malformed .vdo file. (no CVSS)
- [CVE-1999-1010](https://cve.now/CVE-1999-1010.md): An SSH 1.2.27 server allows a client to use the "none" cipher, even if it is not allowed by the server policy. (no CVSS)
- [CVE-2000-0010](https://cve.now/CVE-2000-0010.md): WebWho+ whois.cgi program allows remote attackers to execute commands via shell metacharacters in the TLD parameter. (no CVSS)
- [CVE-2000-0012](https://cve.now/CVE-2000-0012.md): Buffer overflow in w3-msql CGI program in miniSQL package allows remote attackers to execute commands. (no CVSS)
- [CVE-2000-0014](https://cve.now/CVE-2000-0014.md): Denial of service in Savant web server via a null character in the requested URL. (no CVSS)
- [CVE-2000-0020](https://cve.now/CVE-2000-0020.md): DNS PRO allows remote attackers to conduct a denial of service via a large number of connections. (no CVSS)
- [CVE-2000-0024](https://cve.now/CVE-2000-0024.md): IIS does not properly canonicalize URLs, potentially allowing remote attackers to bypass access restrictions in third-party software via esc (no CVSS)
- [CVE-2000-0033](https://cve.now/CVE-2000-0033.md): InterScan VirusWall SMTP scanner does not properly scan messages with malformed attachments. (no CVSS)
- [CVE-2000-0042](https://cve.now/CVE-2000-0042.md): Buffer overflow in CSM mail server allows remote attackers to cause a denial of service or execute commands via a long HELO command. (no CVSS)
- [CVE-2000-0043](https://cve.now/CVE-2000-0043.md): Buffer overflow in CamShot WebCam HTTP server allows remote attackers to execute commands via a long GET request. (no CVSS)
- [CVE-2000-0050](https://cve.now/CVE-2000-0050.md): The Allaire Spectra Webtop allows authenticated users to access other Webtop sections by specifying explicit URLs. (no CVSS)
- [CVE-2000-0051](https://cve.now/CVE-2000-0051.md): The Allaire Spectra Configuration Wizard allows remote attackers to cause a denial of service by repeatedly resubmitting data collections fo (no CVSS)
- [CVE-2000-0070](https://cve.now/CVE-2000-0070.md): NtImpersonateClientOfPort local procedure call in Windows NT 4.0 allows local users to gain privileges, aka "Spoofed LPC Port Request." (no CVSS)
- [CVE-2000-0112](https://cve.now/CVE-2000-0112.md): The default installation of Debian GNU/Linux uses an insecure Master Boot Record (MBR) which allows a local user to boot from a floppy disk (no CVSS)
- [CVE-2000-0165](https://cve.now/CVE-2000-0165.md): The Delegate application proxy has several buffer overflows which allow a remote attacker to execute commands. (no CVSS)
- [CVE-2000-0181](https://cve.now/CVE-2000-0181.md): Firewall-1 3.0 and 4.0 leaks packets with private IP address information, which could allow remote attackers to determine the real IP addres (no CVSS)
- [CVE-2000-0184](https://cve.now/CVE-2000-0184.md): Linux printtool sets the permissions of printer configuration files to be world-readable, which allows local attackers to obtain printer sha (no CVSS)
- [CVE-2000-0185](https://cve.now/CVE-2000-0185.md): RealMedia RealServer reveals the real IP address of a Real Server, even if the address is supposed to be private. (no CVSS)
- [CVE-2000-0192](https://cve.now/CVE-2000-0192.md): The default installation of Caldera OpenLinux 2.3 includes the CGI program rpm\_query, which allows remote attackers to determine what packag (no CVSS)
- [CVE-2000-0206](https://cve.now/CVE-2000-0206.md): The installation of Oracle 8.1.5.x on Linux follows symlinks and creates the orainstRoot.sh file with world-writeable permissions, which all (no CVSS)
- [CVE-2000-0223](https://cve.now/CVE-2000-0223.md): Buffer overflow in the wmcdplay CD player program for the WindowMaker desktop allows local users to gain root privileges via a long paramete (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2000-04-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.