CVEs published June 2, 2000
56 CVEs were published on June 2, 2000: 0 critical, 0 high.
- Published
- 56
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 56
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 56
- CVE-1999-0031JavaScript in Internet Explorer 3.x and 4.x, and Netscape 2.x, 3.x and 4.x, allows remote attackers to monitor a user's web activities, aka
- CVE-1999-0118AIX infod allows local users to gain root access through an X display.
- CVE-1999-0124Vulnerabilities in UMN gopher and gopher+ versions 1.12 and 2.0x allow an intruder to read any files that can be accessed by the gopher daem
- CVE-1999-0142The Java Applet Security Manager implementation in Netscape Navigator 2.0 and Java Developer's Kit 1.0 allows an applet to connect to arbitr
- CVE-1999-0210Automount daemon automountd allows local or remote users to gain privileges via shell metacharacters.
- CVE-1999-0225Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed SMB logon request in which the actual data size does not
- CVE-1999-0323FreeBSD mmap function allows users to modify append-only or immutable files.
- CVE-1999-0407By default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force password attacks, or
- CVE-1999-0464Local users can perform a denial of service in Tripwire 1.2 and earlier using long filenames.
- CVE-1999-0491The prompt parsing in bash allows a local user to execute commands as another user by creating a directory with the name of the command to e
- CVE-1999-0493rpc.statd allows remote attackers to forward RPC calls to the local operating system via the SM_MON and SM_NOTIFY commands, which in turn co
- CVE-1999-0668The scriptlet.typelib ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arb
- CVE-1999-0696Buffer overflow in CDE Calendar Manager Service Daemon (rpc.cmsd).
- CVE-1999-0719The Guile plugin for the Gnumeric spreadsheet package allows attackers to execute arbitrary code.
- CVE-1999-0754The INN inndstart program allows local users to gain privileges by specifying an alternate configuration file using the INNCONF environmenta
- CVE-1999-0819NTMail does not disable the VRFY command, even if the administrator has explicitly disabled it.
- CVE-1999-0832Buffer overflow in NFS server on Linux allows attackers to execute commands via a long pathname.
- CVE-1999-0836UnixWare uidadmin allows local users to modify arbitrary files via a symlink attack.
- CVE-1999-0838Buffer overflow in Serv-U FTP 2.5 allows remote users to conduct a denial of service via the SITE command.
- CVE-1999-0842Symantec Mail-Gear 1.0 web interface server allows remote users to read arbitrary files via a ..
- CVE-1999-0854Ultimate Bulletin Board stores data files in the cgi-bin directory, allowing remote attackers to view the data if an error occurs when the H
- CVE-1999-0856login in Slackware 7.0 allows remote attackers to identify valid users on the system by reporting an encryption error when an account is loc
- CVE-1999-0859Solaris arp allows local users to read files via the -f parameter, which lists lines in the file that do not parse properly.
- CVE-1999-0864UnixWare programs that dump core allow a local user to modify files via a symlink attack on the ./core.pid file.
- CVE-1999-0865Buffer overflow in CommuniGatePro via a long string to the HTTP configuration port.
- CVE-1999-0866Buffer overflow in UnixWare xauto program allows local users to gain root privilege.
- CVE-1999-0874Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .HTR, .IDC, or .STM e
- CVE-1999-0976Sendmail allows local users to reinitialize the aliases database via the newaliases command, then cause a denial of service by interrupting
- CVE-1999-1011The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, wh
- CVE-2000-0004ZBServer Pro allows remote attackers to read source code for executable files by inserting a .
- CVE-2000-0113The SyGate Remote Management program does not properly restrict access to its administration service, which allows remote attackers to cause
- CVE-2000-0169Batch files in the Oracle web listener ows-bin directory allow remote attackers to execute commands via a malformed URL that includes '?&'.
- CVE-2000-0171atsadc in the atsar package for Linux does not properly check the permissions of an output file, which allows local users to gain root privi
- CVE-2000-0226IIS 4.0 allows attackers to cause a denial of service by requesting a large buffer in a POST or PUT command which consumes memory, aka the "
- CVE-2000-0228Microsoft Windows Media License Manager allows remote attackers to cause a denial of service by sending a malformed request that causes the
- CVE-2000-0229gpm-root in the gpm package does not properly drop privileges, which allows local users to gain privileges by starting a utility from gpm-ro
- CVE-2000-0230Buffer overflow in imwheel allows local users to gain root privileges via the imwheel-solo script and a long HOME environmental variable.
- CVE-2000-0231Linux kreatecd trusts a user-supplied path that is used to find the cdrecord program, allowing local users to gain root privileges.
- CVE-2000-0232Microsoft TCP/IP Printing Services, aka Print Services for Unix, allows an attacker to cause a denial of service via a malformed TCP/IP prin
- CVE-2000-0233SuSE Linux IMAP server allows remote attackers to bypass IMAP authentication and gain privileges.
- CVE-2000-0234The default configuration of Cobalt RaQ2 and RaQ3 as specified in access.conf allows remote attackers to view sensitive contents of a .htacc
- CVE-2000-0235Buffer overflow in the huh program in the orville-write package allows local users to gain root privileges.
- CVE-2000-0245Vulnerability in SGI IRIX objectserver daemon allows remote attackers to create user accounts.
- CVE-2000-0246IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote at
- CVE-2000-0258IIS 4.0 and 5.0 allows remote attackers to cause a denial of service by sending many URLs with a large number of escaped characters, aka the
- CVE-2000-0260Buffer overflow in the dvwssr.dll DLL in Microsoft Visual Interdev 1.0 allows users to cause a denial of service or execute commands, aka th
- CVE-2000-0267Cisco Catalyst 5.4.x allows a user to gain access to the "enable" mode without a password.
- CVE-2000-0268Cisco IOS 11.x and 12.x allows remote attackers to cause a denial of service by sending the ENVIRON option to the Telnet daemon before it is
- CVE-2000-0274The Linux trustees kernel patch allows attackers to cause a denial of service by accessing a file or directory with a long name.
- CVE-2000-0277Microsoft Excel 97 and 2000 does not warn the user when executing Excel Macro Language (XLM) macros in external text files, which could allo
- CVE-2000-0294Buffer overflow in healthd for FreeBSD allows local users to gain root privileges.
- CVE-2000-0323The Microsoft Jet database engine allows an attacker to modify text files via a database query, aka the "Text I-ISAM" vulnerability.
- CVE-2000-0327Microsoft Virtual Machine (VM) allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal c
- CVE-2000-0328Windows NT 4.0 generates predictable random TCP initial sequence numbers (ISN), which allows remote attackers to perform spoofing and sessio
- CVE-2000-0329A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embedded script in an HTML
- CVE-2000-0330The networking software in Windows 95 and Windows 98 allows remote attackers to execute commands via a long file name string, aka the "File