# CVEs published 2000-06-02

56 CVEs were published on June 2, 2000: 0 critical, 0 high. Days are UTC.

- [CVE-1999-0031](https://cve.now/CVE-1999-0031.md): JavaScript in Internet Explorer 3.x and 4.x, and Netscape 2.x, 3.x and 4.x, allows remote attackers to monitor a user's web activities, aka (no CVSS)
- [CVE-1999-0118](https://cve.now/CVE-1999-0118.md): AIX infod allows local users to gain root access through an X display. (no CVSS)
- [CVE-1999-0124](https://cve.now/CVE-1999-0124.md): Vulnerabilities in UMN gopher and gopher+ versions 1.12 and 2.0x allow an intruder to read any files that can be accessed by the gopher daem (no CVSS)
- [CVE-1999-0142](https://cve.now/CVE-1999-0142.md): The Java Applet Security Manager implementation in Netscape Navigator 2.0 and Java Developer's Kit 1.0 allows an applet to connect to arbitr (no CVSS)
- [CVE-1999-0210](https://cve.now/CVE-1999-0210.md): Automount daemon automountd allows local or remote users to gain privileges via shell metacharacters. (no CVSS)
- [CVE-1999-0225](https://cve.now/CVE-1999-0225.md): Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed SMB logon request in which the actual data size does not (no CVSS)
- [CVE-1999-0323](https://cve.now/CVE-1999-0323.md): FreeBSD mmap function allows users to modify append-only or immutable files. (no CVSS)
- [CVE-1999-0407](https://cve.now/CVE-1999-0407.md): By default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force password attacks, or (no CVSS)
- [CVE-1999-0464](https://cve.now/CVE-1999-0464.md): Local users can perform a denial of service in Tripwire 1.2 and earlier using long filenames. (no CVSS)
- [CVE-1999-0491](https://cve.now/CVE-1999-0491.md): The prompt parsing in bash allows a local user to execute commands as another user by creating a directory with the name of the command to e (no CVSS)
- [CVE-1999-0493](https://cve.now/CVE-1999-0493.md): rpc.statd allows remote attackers to forward RPC calls to the local operating system via the SM\_MON and SM\_NOTIFY commands, which in turn co (no CVSS)
- [CVE-1999-0668](https://cve.now/CVE-1999-0668.md): The scriptlet.typelib ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arb (no CVSS)
- [CVE-1999-0696](https://cve.now/CVE-1999-0696.md): Buffer overflow in CDE Calendar Manager Service Daemon (rpc.cmsd). (no CVSS)
- [CVE-1999-0719](https://cve.now/CVE-1999-0719.md): The Guile plugin for the Gnumeric spreadsheet package allows attackers to execute arbitrary code. (no CVSS)
- [CVE-1999-0754](https://cve.now/CVE-1999-0754.md): The INN inndstart program allows local users to gain privileges by specifying an alternate configuration file using the INNCONF environmenta (no CVSS)
- [CVE-1999-0819](https://cve.now/CVE-1999-0819.md): NTMail does not disable the VRFY command, even if the administrator has explicitly disabled it. (no CVSS)
- [CVE-1999-0832](https://cve.now/CVE-1999-0832.md): Buffer overflow in NFS server on Linux allows attackers to execute commands via a long pathname. (no CVSS)
- [CVE-1999-0836](https://cve.now/CVE-1999-0836.md): UnixWare uidadmin allows local users to modify arbitrary files via a symlink attack. (no CVSS)
- [CVE-1999-0838](https://cve.now/CVE-1999-0838.md): Buffer overflow in Serv-U FTP 2.5 allows remote users to conduct a denial of service via the SITE command. (no CVSS)
- [CVE-1999-0842](https://cve.now/CVE-1999-0842.md): Symantec Mail-Gear 1.0 web interface server allows remote users to read arbitrary files via a .. (no CVSS)
- [CVE-1999-0854](https://cve.now/CVE-1999-0854.md): Ultimate Bulletin Board stores data files in the cgi-bin directory, allowing remote attackers to view the data if an error occurs when the H (no CVSS)
- [CVE-1999-0856](https://cve.now/CVE-1999-0856.md): login in Slackware 7.0 allows remote attackers to identify valid users on the system by reporting an encryption error when an account is loc (no CVSS)
- [CVE-1999-0859](https://cve.now/CVE-1999-0859.md): Solaris arp allows local users to read files via the -f parameter, which lists lines in the file that do not parse properly. (no CVSS)
- [CVE-1999-0864](https://cve.now/CVE-1999-0864.md): UnixWare programs that dump core allow a local user to modify files via a symlink attack on the ./core.pid file. (no CVSS)
- [CVE-1999-0865](https://cve.now/CVE-1999-0865.md): Buffer overflow in CommuniGatePro via a long string to the HTTP configuration port. (no CVSS)
- [CVE-1999-0866](https://cve.now/CVE-1999-0866.md): Buffer overflow in UnixWare xauto program allows local users to gain root privilege. (no CVSS)
- [CVE-1999-0874](https://cve.now/CVE-1999-0874.md): Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .HTR, .IDC, or .STM e (no CVSS)
- [CVE-1999-0976](https://cve.now/CVE-1999-0976.md): Sendmail allows local users to reinitialize the aliases database via the newaliases command, then cause a denial of service by interrupting (no CVSS)
- [CVE-1999-1011](https://cve.now/CVE-1999-1011.md): The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, wh (no CVSS)
- [CVE-2000-0004](https://cve.now/CVE-2000-0004.md): ZBServer Pro allows remote attackers to read source code for executable files by inserting a . (no CVSS)
- [CVE-2000-0113](https://cve.now/CVE-2000-0113.md): The SyGate Remote Management program does not properly restrict access to its administration service, which allows remote attackers to cause (no CVSS)
- [CVE-2000-0169](https://cve.now/CVE-2000-0169.md): Batch files in the Oracle web listener ows-bin directory allow remote attackers to execute commands via a malformed URL that includes '?&'. (no CVSS)
- [CVE-2000-0171](https://cve.now/CVE-2000-0171.md): atsadc in the atsar package for Linux does not properly check the permissions of an output file, which allows local users to gain root privi (no CVSS)
- [CVE-2000-0226](https://cve.now/CVE-2000-0226.md): IIS 4.0 allows attackers to cause a denial of service by requesting a large buffer in a POST or PUT command which consumes memory, aka the " (no CVSS)
- [CVE-2000-0228](https://cve.now/CVE-2000-0228.md): Microsoft Windows Media License Manager allows remote attackers to cause a denial of service by sending a malformed request that causes the (no CVSS)
- [CVE-2000-0229](https://cve.now/CVE-2000-0229.md): gpm-root in the gpm package does not properly drop privileges, which allows local users to gain privileges by starting a utility from gpm-ro (no CVSS)
- [CVE-2000-0230](https://cve.now/CVE-2000-0230.md): Buffer overflow in imwheel allows local users to gain root privileges via the imwheel-solo script and a long HOME environmental variable. (no CVSS)
- [CVE-2000-0231](https://cve.now/CVE-2000-0231.md): Linux kreatecd trusts a user-supplied path that is used to find the cdrecord program, allowing local users to gain root privileges. (no CVSS)
- [CVE-2000-0232](https://cve.now/CVE-2000-0232.md): Microsoft TCP/IP Printing Services, aka Print Services for Unix, allows an attacker to cause a denial of service via a malformed TCP/IP prin (no CVSS)
- [CVE-2000-0233](https://cve.now/CVE-2000-0233.md): SuSE Linux IMAP server allows remote attackers to bypass IMAP authentication and gain privileges. (no CVSS)
- [CVE-2000-0234](https://cve.now/CVE-2000-0234.md): The default configuration of Cobalt RaQ2 and RaQ3 as specified in access.conf allows remote attackers to view sensitive contents of a .htacc (no CVSS)
- [CVE-2000-0235](https://cve.now/CVE-2000-0235.md): Buffer overflow in the huh program in the orville-write package allows local users to gain root privileges. (no CVSS)
- [CVE-2000-0245](https://cve.now/CVE-2000-0245.md): Vulnerability in SGI IRIX objectserver daemon allows remote attackers to create user accounts. (no CVSS)
- [CVE-2000-0246](https://cve.now/CVE-2000-0246.md): IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote at (no CVSS)
- [CVE-2000-0258](https://cve.now/CVE-2000-0258.md): IIS 4.0 and 5.0 allows remote attackers to cause a denial of service by sending many URLs with a large number of escaped characters, aka the (no CVSS)
- [CVE-2000-0260](https://cve.now/CVE-2000-0260.md): Buffer overflow in the dvwssr.dll DLL in Microsoft Visual Interdev 1.0 allows users to cause a denial of service or execute commands, aka th (no CVSS)
- [CVE-2000-0267](https://cve.now/CVE-2000-0267.md): Cisco Catalyst 5.4.x allows a user to gain access to the "enable" mode without a password. (no CVSS)
- [CVE-2000-0268](https://cve.now/CVE-2000-0268.md): Cisco IOS 11.x and 12.x allows remote attackers to cause a denial of service by sending the ENVIRON option to the Telnet daemon before it is (no CVSS)
- [CVE-2000-0274](https://cve.now/CVE-2000-0274.md): The Linux trustees kernel patch allows attackers to cause a denial of service by accessing a file or directory with a long name. (no CVSS)
- [CVE-2000-0277](https://cve.now/CVE-2000-0277.md): Microsoft Excel 97 and 2000 does not warn the user when executing Excel Macro Language (XLM) macros in external text files, which could allo (no CVSS)
- [CVE-2000-0294](https://cve.now/CVE-2000-0294.md): Buffer overflow in healthd for FreeBSD allows local users to gain root privileges. (no CVSS)
- [CVE-2000-0323](https://cve.now/CVE-2000-0323.md): The Microsoft Jet database engine allows an attacker to modify text files via a database query, aka the "Text I-ISAM" vulnerability. (no CVSS)
- [CVE-2000-0327](https://cve.now/CVE-2000-0327.md): Microsoft Virtual Machine (VM) allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal c (no CVSS)
- [CVE-2000-0328](https://cve.now/CVE-2000-0328.md): Windows NT 4.0 generates predictable random TCP initial sequence numbers (ISN), which allows remote attackers to perform spoofing and sessio (no CVSS)
- [CVE-2000-0329](https://cve.now/CVE-2000-0329.md): A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embedded script in an HTML (no CVSS)
- [CVE-2000-0330](https://cve.now/CVE-2000-0330.md): The networking software in Windows 95 and Windows 98 allows remote attackers to execute commands via a long file name string, aka the "File (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2000-06-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.