# CVEs published 2000-05-18

7 CVEs were published on May 18, 2000: 0 critical, 0 high. Days are UTC.

- [CVE-2000-0317](https://cve.now/CVE-2000-0317.md): Buffer overflow in Solaris 7 lpset allows local users to gain root privileges via a long -r option. (no CVSS)
- [CVE-2000-0321](https://cve.now/CVE-2000-0321.md): Buffer overflow in IC Radius package allows a remote attacker to cause a denial of service via a long user name. (no CVSS)
- [CVE-2000-0325](https://cve.now/CVE-2000-0325.md): The Microsoft Jet database engine allows an attacker to execute commands via a database query, aka the "VBA Shell" vulnerability. (no CVSS)
- [CVE-2000-0326](https://cve.now/CVE-2000-0326.md): Meeting Maker uses weak encryption (a polyalphabetic substitution cipher) for passwords, which allows remote attackers to sniff and decrypt (no CVSS)
- [CVE-2000-0333](https://cve.now/CVE-2000-0333.md): tcpdump, Ethereal, and other sniffer packages allow remote attackers to cause a denial of service via malformed DNS packets in which a jump (no CVSS)
- [CVE-2000-0343](https://cve.now/CVE-2000-0343.md): Buffer overflow in Sniffit 0.3.x with the -L logging option enabled allows remote attackers to execute arbitrary commands via a long MAIL FR (no CVSS)
- [CVE-2000-0345](https://cve.now/CVE-2000-0345.md): The on-line help system options in Cisco routers allows non-privileged users without "enabled" access to obtain sensitive information via th (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2000-05-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.