CVEs published July 12, 2000
140 CVEs were published on July 12, 2000: 0 critical, 0 high.
- Published
- 140
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 140
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 140
- CVE-1999-0378InterScan VirusWall for Solaris doesn't scan files for viruses when a single HTTP request includes two GET commands.
- CVE-1999-0387A legacy credential caching mechanism used in Windows 95 and Windows 98 systems allows attackers to read plaintext network passwords.
- CVE-1999-0415The HTTP server in Cisco 7xx series routers 3.2 through 4.2 is enabled by default, which allows remote attackers to change the router's conf
- CVE-1999-0416Vulnerability in Cisco 7xx series routers allows a remote attacker to cause a system reload via a TCP connection to the router's TELNET port
- CVE-1999-0820FreeBSD seyon allows users to gain privileges via a modified PATH variable for finding the xterm and seyon-emu commands.
- CVE-1999-0959IRIX startmidi program allows local users to modify arbitrary files via a symlink attack.
- CVE-2000-0001RealMedia server allows remote attackers to cause a denial of service via a long ramgen request.
- CVE-2000-0011Buffer overflow in AnalogX SimpleServer:WWW HTTP server allows remote attackers to execute commands via a long GET request.
- CVE-2000-0013IRIX soundplayer program allows local users to gain privileges by including shell metacharacters in a .wav file, which is executed via the m
- CVE-2000-0015CascadeView TFTP server allows local users to gain privileges via a symlink attack.
- CVE-2000-0018wmmon in FreeBSD allows local users to gain privileges via the .wmmonrc configuration file.
- CVE-2000-0030Solaris dmispd dmi_cmd allows local users to fill up restricted disk space by adding files to the /var/dmi/db database.
- CVE-2000-0032Solaris dmi_cmd allows local users to crash the dmispd daemon by adding a malformed file to the /var/dmi/db database.
- CVE-2000-0034Netscape 4.7 records user passwords in the preferences.js file during an IMAP or POP session, even if the user has not enabled "remember pas
- CVE-2000-0045MySQL allows local users to modify passwords for arbitrary MySQL users via the GRANT privilege.
- CVE-2000-0092The BSD make program allows local users to modify files via a symlink attack when the -j option is being used.
- CVE-2000-0157NetBSD ptrace call on VAX allows local users to gain privileges by modifying the PSL contents in the debugging process.
- CVE-2000-0168Microsoft Windows 9x operating systems allow an attacker to cause a denial of service via a pathname that includes file device names, aka th
- CVE-2000-0174StarOffice StarScheduler web server allows remote attackers to read arbitrary files via a ..
- CVE-2000-0175Buffer overflow in StarOffice StarScheduler web server allows remote attackers to gain root access via a long GET command.
- CVE-2000-0195setxconf in Corel Linux allows local users to gain root access via the -T parameter, which executes the user's .xserverrc file.
- CVE-2000-0236Netscape Enterprise Server with Directory Indexing enabled allows remote attackers to list server directories via web publishing tags such a
- CVE-2000-0249The AIX Fast Response Cache Accelerator (FRCA) allows local users to modify arbitrary files via the configuration capability in the frcactrl
- CVE-2000-0251HP-UX 11.04 VirtualVault (VVOS) sends data to unprivileged processes via an interface that has multiple aliased IP addresses.
- CVE-2000-0261The AVM KEN! web server allows remote attackers to read arbitrary files via a ..
- CVE-2000-0262The AVM KEN! ISDN Proxy server allows remote attackers to cause a denial of service via a malformed request.
- CVE-2000-0264Panda Security 3.0 with registry editing disabled allows users to edit the registry and gain privileges by directly executing a .reg file or
- CVE-2000-0279BeOS allows remote attackers to cause a denial of service via malformed packets whose length field is less than the length of the headers.
- CVE-2000-0297Allaire Forums 2.0.5 allows remote attackers to bypass access restrictions to secure conferences via the rightAccessAllForums or rightModera
- CVE-2000-0303Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot (..) attack.
- CVE-2000-0304Microsoft IIS 4.0 and 5.0 with the IISADMPWD virtual directory installed allows a remote attacker to cause a denial of service via a malform
- CVE-2000-0305Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a denial of service by se
- CVE-2000-0311The Windows 2000 domain controller allows a malicious user to modify Active Directory information by modifying an unprotected attribute, aka
- CVE-2000-0316Buffer overflow in Solaris 7 lp allows local users to gain root privileges via a long -d option.
- CVE-2000-0331Buffer overflow in Microsoft command processor (CMD.EXE) for Windows NT and Windows 2000 allows a local user to cause a denial of service vi
- CVE-2000-0334The Allaire Spectra container editor preview tool does not properly enforce object security, which allows an attacker to conduct unauthorize
- CVE-2000-0336Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack.
- CVE-2000-0337Buffer overflow in Xsun X server in Solaris 7 allows local users to gain root privileges via a long -dev parameter.
- CVE-2000-0339ZoneAlarm 2.1.10 and earlier does not filter UDP packets with a source port of 67, which allows remote attackers to bypass the firewall rule
- CVE-2000-0342Eudora 4.x allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by using a .lnk file t
- CVE-2000-0346AppleShare IP 6.1 and later allows a remote attacker to read potentially sensitive information via an invalid range request to the web serve
- CVE-2000-0350A debugging feature in NetworkICE ICEcap 2.0.23 and earlier is enabled, which allows a remote attacker to bypass the weak authentication and
- CVE-2000-0352Pine before version 4.21 does not properly filter shell metacharacters from URLs, which allows remote attackers to execute arbitrary command
- CVE-2000-0353Pine 4.x allows a remote attacker to execute arbitrary commands via an index.html file which executes lynx and obtains a uudecoded file from
- CVE-2000-0354mirror 2.8.x in Linux systems allows remote attackers to create files one level above the local target directory.
- CVE-2000-0356Pluggable Authentication Modules (PAM) in Red Hat Linux 6.1 does not properly lock access to disabled NIS accounts.
- CVE-2000-0359Buffer overflow in Trivial HTTP (THTTPd) allows remote attackers to cause a denial of service or execute arbitrary commands via a long If-Mo
- CVE-2000-0360Buffer overflow in INN 2.2.1 and earlier allows remote attackers to cause a denial of service via a maliciously formatted article.
- CVE-2000-0361The PPP wvdial.lxdialog script in wvdial 1.4 and earlier creates a .config file with world readable permissions, which allows a local attack
- CVE-2000-0362Buffer overflows in Linux cdwtools 093 and earlier allows local users to gain root privileges.
- CVE-2000-0363Linux cdwtools 093 and earlier allows local users to gain root privileges via the /tmp directory.
- CVE-2000-0367Vulnerability in eterm 0.8.8 in Debian GNU/Linux allows an attacker to gain root privileges.
- CVE-2000-0370The debug option in Caldera Linux smail allows remote attackers to execute commands via shell metacharacters in the -D option for the rmail
- CVE-2000-0371The libmediatool library used for the KDE mediatool allows local users to create arbitrary files via a symlink attack.
- CVE-2000-0372Vulnerability in Caldera rmt command in the dump package 0.4b4 allows a local user to gain root privileges.
- CVE-2000-0373Vulnerabilities in the KDE kvt terminal program allow local users to gain root privileges.
- CVE-2000-0376Buffer overflow in the HTTP proxy server for the i-drive Filo software allows remote attackers to execute arbitrary commands via a long HTTP
- CVE-2000-0377The Remote Registry server in Windows NT 4.0 allows local authenticated users to cause a denial of service via a malformed request, which ca
- CVE-2000-0379The Netopia R9100 router does not prevent authenticated users from modifying SNMP tables, even if the administrator has configured it to do
- CVE-2000-0380The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a denial of service by req
- CVE-2000-0381The Gossamer Threads DBMan db.cgi CGI script allows remote attackers to view environmental variables and setup information by referencing a
- CVE-2000-0382ColdFusion ClusterCATS appends stale query string arguments to a URL during HTML redirection, which may provide sensitive information to the
- CVE-2000-0387The makelev program in the golddig game from the FreeBSD ports collection allows local users to overwrite arbitrary files.
- CVE-2000-0388Buffer overflow in FreeBSD libmytinfo library allows local users to execute commands via a long TERMCAP environmental variable.
- CVE-2000-0389Buffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root privileges.
- CVE-2000-0390Buffer overflow in krb425_conv_principal function in Kerberos 5 allows remote attackers to gain root privileges.
- CVE-2000-0391Buffer overflow in krshd in Kerberos 5 allows remote attackers to gain root privileges.
- CVE-2000-0392Buffer overflow in ksu in Kerberos 5 allows local users to gain root privileges.
- CVE-2000-0393The KDE kscd program does not drop privileges when executing a program specified in a user's SHELL environmental variable, which allows the
- CVE-2000-0394NetProwler 3.0 allows remote attackers to cause a denial of service by sending malformed IP packets that trigger NetProwler's Man-in-the-Mid
- CVE-2000-0395Buffer overflow in CProxy 3.3 allows remote users to cause a denial of service via a long HTTP request.
- CVE-2000-0396The add.exe program in the Carello shopping cart software allows remote attackers to duplicate files on the server, which could allow the at
- CVE-2000-0397The EMURL web-based email account software encodes predictable identifiers in user session URLs, which allows a remote attacker to access a
- CVE-2000-0398Buffer overflow in wconsole.dll in Rockliffe MailSite Management Agent allows remote attackers to execute arbitrary commands via a long quer
- CVE-2000-0399Buffer overflow in MDaemon POP server allows remote attackers to cause a denial of service via a long user name.
- CVE-2000-0402The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in plaintext in a log file
- CVE-2000-0403The CIFS Computer Browser service on Windows NT 4.0 allows a remote attacker to cause a denial of service by sending a large number of host
- CVE-2000-0404The CIFS Computer Browser service allows remote attackers to cause a denial of service by sending a ResetBrowser frame to the Master Browser
- CVE-2000-0405Buffer overflow in L0pht AntiSniff allows remote attackers to execute arbitrary commands via a malformed DNS response packet.
- CVE-2000-0406Netscape Communicator before version 4.73 and Navigator 4.07 do not properly validate SSL certificates, which allows remote attackers to ste
- CVE-2000-0407Buffer overflow in Solaris netpr program allows local users to execute arbitrary commands via a long -p option.
- CVE-2000-0408IIS 4.05 and 5.0 allow remote attackers to cause a denial of service via a long, complex URL that appears to contain a large number of file
- CVE-2000-0409Netscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local users to overwrite files of the user import
- CVE-2000-0410ColdFusion Server 4.5.1 allows remote attackers to cause a denial of service by making repeated requests to a CFCACHE tagged cache file that
- CVE-2000-0411Matt Wright's FormMail CGI script allows remote attackers to obtain environmental variables via the env_report parameter.
- CVE-2000-0414Vulnerability in shutdown command for HP-UX 11.X and 10.X allows allows local users to gain privileges via malformed input variables.
- CVE-2000-0416NTMail 5.x allows network users to bypass the NTMail proxy restrictions by redirecting their requests to NTMail's web configuration server.
- CVE-2000-0417The HTTP administration interface to the Cayman 3220-H DSL router allows remote attackers to cause a denial of service via a long username o
- CVE-2000-0418The Cayman 3220-H DSL router allows remote attackers to cause a denial of service via oversized ICMP echo (ping) requests.
- CVE-2000-0419The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthorized activities via t
- CVE-2000-0421The process_bug.cgi script in Bugzilla allows remote attackers to execute arbitrary commands via shell metacharacters.
- CVE-2000-0424The CGI counter 4.0.7 by George Burgyan allows remote attackers to execute arbitrary commands via shell metacharacters.
- CVE-2000-0425Buffer overflow in the Web Archives component of L-Soft LISTSERV 1.8 allows remote attackers to execute arbitrary commands.
- CVE-2000-0427The Aladdin Knowledge Systems eToken device allows attackers with physical access to the device to obtain sensitive information without know
- CVE-2000-0428Buffer overflow in the SMTP gateway for InterScan Virus Wall 3.32 and earlier allows a remote attacker to execute arbitrary commands via a l
- CVE-2000-0431Cobalt RaQ2 and RaQ3 does not properly set the access permissions and ownership for files that are uploaded via FrontPage, which allows atta
- CVE-2000-0432The calender.pl and the calendar_admin.pl calendar scripts by Matt Kruse allow remote attackers to execute arbitrary commands via shell meta
- CVE-2000-0435The allmanageup.pl file upload CGI script in the Allmanage Website administration software 2.6 can be called directly by remote attackers, w
- CVE-2000-0436MetaProducts Offline Explorer 1.2 and earlier allows remote attackers to access arbitrary files via a ..
- CVE-2000-0437Buffer overflow in the CyberPatrol daemon "cyberdaemon" used in gauntlet and WebShield allows remote attackers to cause a denial of service
- CVE-2000-0438Buffer overflow in fdmount on Linux systems allows local users in the "floppy" group to execute arbitrary commands via a long mountpoint par
- CVE-2000-0439Internet Explorer 4.0 and 5.0 allows a malicious web site to obtain client cookies from another domain by including that domain name and esc
- CVE-2000-0441Vulnerability in AIX 3.2.x and 4.x allows local users to gain write access to files on locally or remotely mounted AIX filesystems.
- CVE-2000-0442Qpopper 2.53 and earlier allows local users to gain privileges via a formatting string in the From: header, which is processed by the euidl
- CVE-2000-0452Buffer overflow in the ESMTP service of Lotus Domino Server 5.0.1 allows remote attackers to cause a denial of service via a long MAIL FROM
- CVE-2000-0453XFree86 3.3.x and 4.0 allows a user to cause a denial of service via a negative counter value in a malformed TCP packet that is sent to port
- CVE-2000-0454Buffer overflow in Linux cdrecord allows local users to gain privileges via the dev parameter.
- CVE-2000-0455Buffer overflow in xlockmore xlock program version 4.16 and earlier allows local users to read sensitive data from memory via a long -mode o
- CVE-2000-0456NetBSD 1.4.2 and earlier allows local users to cause a denial of service by repeatedly running certain system calls in the kernel which do n
- CVE-2000-0460Buffer overflow in KDE kdesud on Linux allows local uses to gain privileges via a long DISPLAY environmental variable.
- CVE-2000-0461The undocumented semconfig system call in BSD freezes the state of semaphores, which allows local users to cause a denial of service of the
- CVE-2000-0462ftpd in NetBSD 1.4.2 does not properly parse entries in /etc/ftpchroot and does not chroot the specified users, which allows those users to
- CVE-2000-0463BeOS 5.0 allows remote attackers to cause a denial of service via fragmented TCP packets.
- CVE-2000-0464Internet Explorer 4.x and 5.x allows remote attackers to execute arbitrary commands via a buffer overflow in the ActiveX parameter parsing c
- CVE-2000-0465Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote attacker to rea
- CVE-2000-0473Buffer overflow in AnalogX SimpleServer 1.05 allows a remote attacker to cause a denial of service via a long GET request for a program in t
- CVE-2000-0476xterm, Eterm, and rxvt allow an attacker to cause a denial of service by embedding certain escape characters which force the window to be re
- CVE-2000-0479Dragon FTP server allows remote attackers to cause a denial of service via a long USER command.
- CVE-2000-0480Dragon telnet server allows remote attackers to cause a denial of service via a long username.
- CVE-2000-0487The Protected Store in Windows 2000 does not properly select the strongest encryption when available, which causes it to use a default of 40
- CVE-2000-0491Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to execute arbitrary commands or cause a de
- CVE-2000-0492PassWD 1.2 uses weak encryption (trivial encoding) to store passwords, which allows an attacker who can read the password file to easliy dec
- CVE-2000-0503The IFRAME of the WebBrowser control in Internet Explorer 5.01 allows a remote attacker to violate the cross frame security policy via the N
- CVE-2000-0509Buffer overflows in the finger and whois demonstration scripts in Sambar Server 4.3 allow remote attackers to execute arbitrary commands via
- CVE-2000-0520Buffer overflow in restore program 0.4b17 and earlier in dump package allows local users to execute arbitrary commands via a long tape name.
- CVE-2000-0524Microsoft Outlook and Outlook Express allow remote attackers to cause a denial of service by sending email messages with blank fields such a
- CVE-2000-0526mailview.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to read arbitrary files via a ..
- CVE-2000-0527userreg.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters.
- CVE-2000-0531Linux gpm program allows local users to cause a denial of service by flooding the /dev/gpmctl device with STREAM sockets.
- CVE-2000-0535OpenSSL 0.9.4 and OpenSSH for FreeBSD do not properly check for the existence of the /dev/random or /dev/urandom devices, which are absent o
- CVE-2000-0543The command port for PGP Certificate Server 2.5.0 and 2.5.1 allows remote attackers to cause a denial of service if their hostname does not
- CVE-2000-0544Windows NT and Windows 2000 hosts allow a remote attacker to cause a denial of service via malformed DCE/RPC SMBwriteX requests that contain
- CVE-2000-0545Buffer overflow in mailx mail command (aka Mail) on Linux systems allows local users to gain privileges via a long -c (carbon copy) paramete
- CVE-2000-0546Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the lastrealm variable in the set_tgtkey
- CVE-2000-0547Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the localrealm variable in the process_v4
- CVE-2000-0554Ceilidh allows remote attackers to obtain the real path of the Ceilidh directory via the translated_path hidden form field.
- CVE-2000-0559eTrust Intrusion Detection System (formerly SessionWall-3) uses weak encryption (XOR) to store administrative passwords in the registry, whi
- CVE-2000-0562BlackIce Defender 2.1 and earlier, and BlackIce Pro 2.0.23 and earlier, do not properly block Back Orifice traffic when the security setting
- CVE-2000-0563The URLConnection function in MacOS Runtime Java (MRJ) 2.1 and earlier and the Microsoft virtual machine (VM) for MacOS allows a malicious w
- CVE-2000-0564The guestbook CGI program in ICQ Web Front service for ICQ 2000a, 99b, and others allows remote attackers to cause a denial of service via a