# CVEs published 2000-07-12

140 CVEs were published on July 12, 2000: 0 critical, 0 high. Days are UTC.

- [CVE-1999-0378](https://cve.now/CVE-1999-0378.md): InterScan VirusWall for Solaris doesn't scan files for viruses when a single HTTP request includes two GET commands. (no CVSS)
- [CVE-1999-0387](https://cve.now/CVE-1999-0387.md): A legacy credential caching mechanism used in Windows 95 and Windows 98 systems allows attackers to read plaintext network passwords. (no CVSS)
- [CVE-1999-0415](https://cve.now/CVE-1999-0415.md): The HTTP server in Cisco 7xx series routers 3.2 through 4.2 is enabled by default, which allows remote attackers to change the router's conf (no CVSS)
- [CVE-1999-0416](https://cve.now/CVE-1999-0416.md): Vulnerability in Cisco 7xx series routers allows a remote attacker to cause a system reload via a TCP connection to the router's TELNET port (no CVSS)
- [CVE-1999-0820](https://cve.now/CVE-1999-0820.md): FreeBSD seyon allows users to gain privileges via a modified PATH variable for finding the xterm and seyon-emu commands. (no CVSS)
- [CVE-1999-0959](https://cve.now/CVE-1999-0959.md): IRIX startmidi program allows local users to modify arbitrary files via a symlink attack. (no CVSS)
- [CVE-2000-0001](https://cve.now/CVE-2000-0001.md): RealMedia server allows remote attackers to cause a denial of service via a long ramgen request. (no CVSS)
- [CVE-2000-0011](https://cve.now/CVE-2000-0011.md): Buffer overflow in AnalogX SimpleServer:WWW HTTP server allows remote attackers to execute commands via a long GET request. (no CVSS)
- [CVE-2000-0013](https://cve.now/CVE-2000-0013.md): IRIX soundplayer program allows local users to gain privileges by including shell metacharacters in a .wav file, which is executed via the m (no CVSS)
- [CVE-2000-0015](https://cve.now/CVE-2000-0015.md): CascadeView TFTP server allows local users to gain privileges via a symlink attack. (no CVSS)
- [CVE-2000-0018](https://cve.now/CVE-2000-0018.md): wmmon in FreeBSD allows local users to gain privileges via the .wmmonrc configuration file. (no CVSS)
- [CVE-2000-0030](https://cve.now/CVE-2000-0030.md): Solaris dmispd dmi\_cmd allows local users to fill up restricted disk space by adding files to the /var/dmi/db database. (no CVSS)
- [CVE-2000-0032](https://cve.now/CVE-2000-0032.md): Solaris dmi\_cmd allows local users to crash the dmispd daemon by adding a malformed file to the /var/dmi/db database. (no CVSS)
- [CVE-2000-0034](https://cve.now/CVE-2000-0034.md): Netscape 4.7 records user passwords in the preferences.js file during an IMAP or POP session, even if the user has not enabled "remember pas (no CVSS)
- [CVE-2000-0045](https://cve.now/CVE-2000-0045.md): MySQL allows local users to modify passwords for arbitrary MySQL users via the GRANT privilege. (no CVSS)
- [CVE-2000-0092](https://cve.now/CVE-2000-0092.md): The BSD make program allows local users to modify files via a symlink attack when the -j option is being used. (no CVSS)
- [CVE-2000-0157](https://cve.now/CVE-2000-0157.md): NetBSD ptrace call on VAX allows local users to gain privileges by modifying the PSL contents in the debugging process. (no CVSS)
- [CVE-2000-0168](https://cve.now/CVE-2000-0168.md): Microsoft Windows 9x operating systems allow an attacker to cause a denial of service via a pathname that includes file device names, aka th (no CVSS)
- [CVE-2000-0174](https://cve.now/CVE-2000-0174.md): StarOffice StarScheduler web server allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2000-0175](https://cve.now/CVE-2000-0175.md): Buffer overflow in StarOffice StarScheduler web server allows remote attackers to gain root access via a long GET command. (no CVSS)
- [CVE-2000-0195](https://cve.now/CVE-2000-0195.md): setxconf in Corel Linux allows local users to gain root access via the -T parameter, which executes the user's .xserverrc file. (no CVSS)
- [CVE-2000-0236](https://cve.now/CVE-2000-0236.md): Netscape Enterprise Server with Directory Indexing enabled allows remote attackers to list server directories via web publishing tags such a (no CVSS)
- [CVE-2000-0249](https://cve.now/CVE-2000-0249.md): The AIX Fast Response Cache Accelerator (FRCA) allows local users to modify arbitrary files via the configuration capability in the frcactrl (no CVSS)
- [CVE-2000-0251](https://cve.now/CVE-2000-0251.md): HP-UX 11.04 VirtualVault (VVOS) sends data to unprivileged processes via an interface that has multiple aliased IP addresses. (no CVSS)
- [CVE-2000-0261](https://cve.now/CVE-2000-0261.md): The AVM KEN! web server allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2000-0262](https://cve.now/CVE-2000-0262.md): The AVM KEN! ISDN Proxy server allows remote attackers to cause a denial of service via a malformed request. (no CVSS)
- [CVE-2000-0264](https://cve.now/CVE-2000-0264.md): Panda Security 3.0 with registry editing disabled allows users to edit the registry and gain privileges by directly executing a .reg file or (no CVSS)
- [CVE-2000-0279](https://cve.now/CVE-2000-0279.md): BeOS allows remote attackers to cause a denial of service via malformed packets whose length field is less than the length of the headers. (no CVSS)
- [CVE-2000-0297](https://cve.now/CVE-2000-0297.md): Allaire Forums 2.0.5 allows remote attackers to bypass access restrictions to secure conferences via the rightAccessAllForums or rightModera (no CVSS)
- [CVE-2000-0303](https://cve.now/CVE-2000-0303.md): Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot (..) attack. (no CVSS)
- [CVE-2000-0304](https://cve.now/CVE-2000-0304.md): Microsoft IIS 4.0 and 5.0 with the IISADMPWD virtual directory installed allows a remote attacker to cause a denial of service via a malform (no CVSS)
- [CVE-2000-0305](https://cve.now/CVE-2000-0305.md): Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a denial of service by se (no CVSS)
- [CVE-2000-0311](https://cve.now/CVE-2000-0311.md): The Windows 2000 domain controller allows a malicious user to modify Active Directory information by modifying an unprotected attribute, aka (no CVSS)
- [CVE-2000-0316](https://cve.now/CVE-2000-0316.md): Buffer overflow in Solaris 7 lp allows local users to gain root privileges via a long -d option. (no CVSS)
- [CVE-2000-0331](https://cve.now/CVE-2000-0331.md): Buffer overflow in Microsoft command processor (CMD.EXE) for Windows NT and Windows 2000 allows a local user to cause a denial of service vi (no CVSS)
- [CVE-2000-0334](https://cve.now/CVE-2000-0334.md): The Allaire Spectra container editor preview tool does not properly enforce object security, which allows an attacker to conduct unauthorize (no CVSS)
- [CVE-2000-0336](https://cve.now/CVE-2000-0336.md): Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack. (no CVSS)
- [CVE-2000-0337](https://cve.now/CVE-2000-0337.md): Buffer overflow in Xsun X server in Solaris 7 allows local users to gain root privileges via a long -dev parameter. (no CVSS)
- [CVE-2000-0339](https://cve.now/CVE-2000-0339.md): ZoneAlarm 2.1.10 and earlier does not filter UDP packets with a source port of 67, which allows remote attackers to bypass the firewall rule (no CVSS)
- [CVE-2000-0342](https://cve.now/CVE-2000-0342.md): Eudora 4.x allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by using a .lnk file t (no CVSS)
- [CVE-2000-0346](https://cve.now/CVE-2000-0346.md): AppleShare IP 6.1 and later allows a remote attacker to read potentially sensitive information via an invalid range request to the web serve (no CVSS)
- [CVE-2000-0350](https://cve.now/CVE-2000-0350.md): A debugging feature in NetworkICE ICEcap 2.0.23 and earlier is enabled, which allows a remote attacker to bypass the weak authentication and (no CVSS)
- [CVE-2000-0352](https://cve.now/CVE-2000-0352.md): Pine before version 4.21 does not properly filter shell metacharacters from URLs, which allows remote attackers to execute arbitrary command (no CVSS)
- [CVE-2000-0353](https://cve.now/CVE-2000-0353.md): Pine 4.x allows a remote attacker to execute arbitrary commands via an index.html file which executes lynx and obtains a uudecoded file from (no CVSS)
- [CVE-2000-0354](https://cve.now/CVE-2000-0354.md): mirror 2.8.x in Linux systems allows remote attackers to create files one level above the local target directory. (no CVSS)
- [CVE-2000-0356](https://cve.now/CVE-2000-0356.md): Pluggable Authentication Modules (PAM) in Red Hat Linux 6.1 does not properly lock access to disabled NIS accounts. (no CVSS)
- [CVE-2000-0359](https://cve.now/CVE-2000-0359.md): Buffer overflow in Trivial HTTP (THTTPd) allows remote attackers to cause a denial of service or execute arbitrary commands via a long If-Mo (no CVSS)
- [CVE-2000-0360](https://cve.now/CVE-2000-0360.md): Buffer overflow in INN 2.2.1 and earlier allows remote attackers to cause a denial of service via a maliciously formatted article. (no CVSS)
- [CVE-2000-0361](https://cve.now/CVE-2000-0361.md): The PPP wvdial.lxdialog script in wvdial 1.4 and earlier creates a .config file with world readable permissions, which allows a local attack (no CVSS)
- [CVE-2000-0362](https://cve.now/CVE-2000-0362.md): Buffer overflows in Linux cdwtools 093 and earlier allows local users to gain root privileges. (no CVSS)
- [CVE-2000-0363](https://cve.now/CVE-2000-0363.md): Linux cdwtools 093 and earlier allows local users to gain root privileges via the /tmp directory. (no CVSS)
- [CVE-2000-0367](https://cve.now/CVE-2000-0367.md): Vulnerability in eterm 0.8.8 in Debian GNU/Linux allows an attacker to gain root privileges. (no CVSS)
- [CVE-2000-0370](https://cve.now/CVE-2000-0370.md): The debug option in Caldera Linux smail allows remote attackers to execute commands via shell metacharacters in the -D option for the rmail (no CVSS)
- [CVE-2000-0371](https://cve.now/CVE-2000-0371.md): The libmediatool library used for the KDE mediatool allows local users to create arbitrary files via a symlink attack. (no CVSS)
- [CVE-2000-0372](https://cve.now/CVE-2000-0372.md): Vulnerability in Caldera rmt command in the dump package 0.4b4 allows a local user to gain root privileges. (no CVSS)
- [CVE-2000-0373](https://cve.now/CVE-2000-0373.md): Vulnerabilities in the KDE kvt terminal program allow local users to gain root privileges. (no CVSS)
- [CVE-2000-0376](https://cve.now/CVE-2000-0376.md): Buffer overflow in the HTTP proxy server for the i-drive Filo software allows remote attackers to execute arbitrary commands via a long HTTP (no CVSS)
- [CVE-2000-0377](https://cve.now/CVE-2000-0377.md): The Remote Registry server in Windows NT 4.0 allows local authenticated users to cause a denial of service via a malformed request, which ca (no CVSS)
- [CVE-2000-0379](https://cve.now/CVE-2000-0379.md): The Netopia R9100 router does not prevent authenticated users from modifying SNMP tables, even if the administrator has configured it to do (no CVSS)
- [CVE-2000-0380](https://cve.now/CVE-2000-0380.md): The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a denial of service by req (no CVSS)
- [CVE-2000-0381](https://cve.now/CVE-2000-0381.md): The Gossamer Threads DBMan db.cgi CGI script allows remote attackers to view environmental variables and setup information by referencing a (no CVSS)
- [CVE-2000-0382](https://cve.now/CVE-2000-0382.md): ColdFusion ClusterCATS appends stale query string arguments to a URL during HTML redirection, which may provide sensitive information to the (no CVSS)
- [CVE-2000-0387](https://cve.now/CVE-2000-0387.md): The makelev program in the golddig game from the FreeBSD ports collection allows local users to overwrite arbitrary files. (no CVSS)
- [CVE-2000-0388](https://cve.now/CVE-2000-0388.md): Buffer overflow in FreeBSD libmytinfo library allows local users to execute commands via a long TERMCAP environmental variable. (no CVSS)
- [CVE-2000-0389](https://cve.now/CVE-2000-0389.md): Buffer overflow in krb\_rd\_req function in Kerberos 4 and 5 allows remote attackers to gain root privileges. (no CVSS)
- [CVE-2000-0390](https://cve.now/CVE-2000-0390.md): Buffer overflow in krb425\_conv\_principal function in Kerberos 5 allows remote attackers to gain root privileges. (no CVSS)
- [CVE-2000-0391](https://cve.now/CVE-2000-0391.md): Buffer overflow in krshd in Kerberos 5 allows remote attackers to gain root privileges. (no CVSS)
- [CVE-2000-0392](https://cve.now/CVE-2000-0392.md): Buffer overflow in ksu in Kerberos 5 allows local users to gain root privileges. (no CVSS)
- [CVE-2000-0393](https://cve.now/CVE-2000-0393.md): The KDE kscd program does not drop privileges when executing a program specified in a user's SHELL environmental variable, which allows the (no CVSS)
- [CVE-2000-0394](https://cve.now/CVE-2000-0394.md): NetProwler 3.0 allows remote attackers to cause a denial of service by sending malformed IP packets that trigger NetProwler's Man-in-the-Mid (no CVSS)
- [CVE-2000-0395](https://cve.now/CVE-2000-0395.md): Buffer overflow in CProxy 3.3 allows remote users to cause a denial of service via a long HTTP request. (no CVSS)
- [CVE-2000-0396](https://cve.now/CVE-2000-0396.md): The add.exe program in the Carello shopping cart software allows remote attackers to duplicate files on the server, which could allow the at (no CVSS)
- [CVE-2000-0397](https://cve.now/CVE-2000-0397.md): The EMURL web-based email account software encodes predictable identifiers in user session URLs, which allows a remote attacker to access a (no CVSS)
- [CVE-2000-0398](https://cve.now/CVE-2000-0398.md): Buffer overflow in wconsole.dll in Rockliffe MailSite Management Agent allows remote attackers to execute arbitrary commands via a long quer (no CVSS)
- [CVE-2000-0399](https://cve.now/CVE-2000-0399.md): Buffer overflow in MDaemon POP server allows remote attackers to cause a denial of service via a long user name. (no CVSS)
- [CVE-2000-0402](https://cve.now/CVE-2000-0402.md): The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in plaintext in a log file (no CVSS)
- [CVE-2000-0403](https://cve.now/CVE-2000-0403.md): The CIFS Computer Browser service on Windows NT 4.0 allows a remote attacker to cause a denial of service by sending a large number of host (no CVSS)
- [CVE-2000-0404](https://cve.now/CVE-2000-0404.md): The CIFS Computer Browser service allows remote attackers to cause a denial of service by sending a ResetBrowser frame to the Master Browser (no CVSS)
- [CVE-2000-0405](https://cve.now/CVE-2000-0405.md): Buffer overflow in L0pht AntiSniff allows remote attackers to execute arbitrary commands via a malformed DNS response packet. (no CVSS)
- [CVE-2000-0406](https://cve.now/CVE-2000-0406.md): Netscape Communicator before version 4.73 and Navigator 4.07 do not properly validate SSL certificates, which allows remote attackers to ste (no CVSS)
- [CVE-2000-0407](https://cve.now/CVE-2000-0407.md): Buffer overflow in Solaris netpr program allows local users to execute arbitrary commands via a long -p option. (no CVSS)
- [CVE-2000-0408](https://cve.now/CVE-2000-0408.md): IIS 4.05 and 5.0 allow remote attackers to cause a denial of service via a long, complex URL that appears to contain a large number of file (no CVSS)
- [CVE-2000-0409](https://cve.now/CVE-2000-0409.md): Netscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local users to overwrite files of the user import (no CVSS)
- [CVE-2000-0410](https://cve.now/CVE-2000-0410.md): ColdFusion Server 4.5.1 allows remote attackers to cause a denial of service by making repeated requests to a CFCACHE tagged cache file that (no CVSS)
- [CVE-2000-0411](https://cve.now/CVE-2000-0411.md): Matt Wright's FormMail CGI script allows remote attackers to obtain environmental variables via the env\_report parameter. (no CVSS)
- [CVE-2000-0414](https://cve.now/CVE-2000-0414.md): Vulnerability in shutdown command for HP-UX 11.X and 10.X allows allows local users to gain privileges via malformed input variables. (no CVSS)
- [CVE-2000-0416](https://cve.now/CVE-2000-0416.md): NTMail 5.x allows network users to bypass the NTMail proxy restrictions by redirecting their requests to NTMail's web configuration server. (no CVSS)
- [CVE-2000-0417](https://cve.now/CVE-2000-0417.md): The HTTP administration interface to the Cayman 3220-H DSL router allows remote attackers to cause a denial of service via a long username o (no CVSS)
- [CVE-2000-0418](https://cve.now/CVE-2000-0418.md): The Cayman 3220-H DSL router allows remote attackers to cause a denial of service via oversized ICMP echo (ping) requests. (no CVSS)
- [CVE-2000-0419](https://cve.now/CVE-2000-0419.md): The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthorized activities via t (no CVSS)
- [CVE-2000-0421](https://cve.now/CVE-2000-0421.md): The process\_bug.cgi script in Bugzilla allows remote attackers to execute arbitrary commands via shell metacharacters. (no CVSS)
- [CVE-2000-0424](https://cve.now/CVE-2000-0424.md): The CGI counter 4.0.7 by George Burgyan allows remote attackers to execute arbitrary commands via shell metacharacters. (no CVSS)
- [CVE-2000-0425](https://cve.now/CVE-2000-0425.md): Buffer overflow in the Web Archives component of L-Soft LISTSERV 1.8 allows remote attackers to execute arbitrary commands. (no CVSS)
- [CVE-2000-0427](https://cve.now/CVE-2000-0427.md): The Aladdin Knowledge Systems eToken device allows attackers with physical access to the device to obtain sensitive information without know (no CVSS)
- [CVE-2000-0428](https://cve.now/CVE-2000-0428.md): Buffer overflow in the SMTP gateway for InterScan Virus Wall 3.32 and earlier allows a remote attacker to execute arbitrary commands via a l (no CVSS)
- [CVE-2000-0431](https://cve.now/CVE-2000-0431.md): Cobalt RaQ2 and RaQ3 does not properly set the access permissions and ownership for files that are uploaded via FrontPage, which allows atta (no CVSS)
- [CVE-2000-0432](https://cve.now/CVE-2000-0432.md): The calender.pl and the calendar\_admin.pl calendar scripts by Matt Kruse allow remote attackers to execute arbitrary commands via shell meta (no CVSS)
- [CVE-2000-0435](https://cve.now/CVE-2000-0435.md): The allmanageup.pl file upload CGI script in the Allmanage Website administration software 2.6 can be called directly by remote attackers, w (no CVSS)
- [CVE-2000-0436](https://cve.now/CVE-2000-0436.md): MetaProducts Offline Explorer 1.2 and earlier allows remote attackers to access arbitrary files via a .. (no CVSS)
- [CVE-2000-0437](https://cve.now/CVE-2000-0437.md): Buffer overflow in the CyberPatrol daemon "cyberdaemon" used in gauntlet and WebShield allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2000-0438](https://cve.now/CVE-2000-0438.md): Buffer overflow in fdmount on Linux systems allows local users in the "floppy" group to execute arbitrary commands via a long mountpoint par (no CVSS)
- [CVE-2000-0439](https://cve.now/CVE-2000-0439.md): Internet Explorer 4.0 and 5.0 allows a malicious web site to obtain client cookies from another domain by including that domain name and esc (no CVSS)
- [CVE-2000-0441](https://cve.now/CVE-2000-0441.md): Vulnerability in AIX 3.2.x and 4.x allows local users to gain write access to files on locally or remotely mounted AIX filesystems. (no CVSS)
- [CVE-2000-0442](https://cve.now/CVE-2000-0442.md): Qpopper 2.53 and earlier allows local users to gain privileges via a formatting string in the From: header, which is processed by the euidl (no CVSS)
- [CVE-2000-0452](https://cve.now/CVE-2000-0452.md): Buffer overflow in the ESMTP service of Lotus Domino Server 5.0.1 allows remote attackers to cause a denial of service via a long MAIL FROM (no CVSS)
- [CVE-2000-0453](https://cve.now/CVE-2000-0453.md): XFree86 3.3.x and 4.0 allows a user to cause a denial of service via a negative counter value in a malformed TCP packet that is sent to port (no CVSS)
- [CVE-2000-0454](https://cve.now/CVE-2000-0454.md): Buffer overflow in Linux cdrecord allows local users to gain privileges via the dev parameter. (no CVSS)
- [CVE-2000-0455](https://cve.now/CVE-2000-0455.md): Buffer overflow in xlockmore xlock program version 4.16 and earlier allows local users to read sensitive data from memory via a long -mode o (no CVSS)
- [CVE-2000-0456](https://cve.now/CVE-2000-0456.md): NetBSD 1.4.2 and earlier allows local users to cause a denial of service by repeatedly running certain system calls in the kernel which do n (no CVSS)
- [CVE-2000-0460](https://cve.now/CVE-2000-0460.md): Buffer overflow in KDE kdesud on Linux allows local uses to gain privileges via a long DISPLAY environmental variable. (no CVSS)
- [CVE-2000-0461](https://cve.now/CVE-2000-0461.md): The undocumented semconfig system call in BSD freezes the state of semaphores, which allows local users to cause a denial of service of the (no CVSS)
- [CVE-2000-0462](https://cve.now/CVE-2000-0462.md): ftpd in NetBSD 1.4.2 does not properly parse entries in /etc/ftpchroot and does not chroot the specified users, which allows those users to (no CVSS)
- [CVE-2000-0463](https://cve.now/CVE-2000-0463.md): BeOS 5.0 allows remote attackers to cause a denial of service via fragmented TCP packets. (no CVSS)
- [CVE-2000-0464](https://cve.now/CVE-2000-0464.md): Internet Explorer 4.x and 5.x allows remote attackers to execute arbitrary commands via a buffer overflow in the ActiveX parameter parsing c (no CVSS)
- [CVE-2000-0465](https://cve.now/CVE-2000-0465.md): Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote attacker to rea (no CVSS)
- [CVE-2000-0473](https://cve.now/CVE-2000-0473.md): Buffer overflow in AnalogX SimpleServer 1.05 allows a remote attacker to cause a denial of service via a long GET request for a program in t (no CVSS)
- [CVE-2000-0476](https://cve.now/CVE-2000-0476.md): xterm, Eterm, and rxvt allow an attacker to cause a denial of service by embedding certain escape characters which force the window to be re (no CVSS)
- [CVE-2000-0479](https://cve.now/CVE-2000-0479.md): Dragon FTP server allows remote attackers to cause a denial of service via a long USER command. (no CVSS)
- [CVE-2000-0480](https://cve.now/CVE-2000-0480.md): Dragon telnet server allows remote attackers to cause a denial of service via a long username. (no CVSS)
- [CVE-2000-0487](https://cve.now/CVE-2000-0487.md): The Protected Store in Windows 2000 does not properly select the strongest encryption when available, which causes it to use a default of 40 (no CVSS)
- [CVE-2000-0491](https://cve.now/CVE-2000-0491.md): Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to execute arbitrary commands or cause a de (no CVSS)
- [CVE-2000-0492](https://cve.now/CVE-2000-0492.md): PassWD 1.2 uses weak encryption (trivial encoding) to store passwords, which allows an attacker who can read the password file to easliy dec (no CVSS)
- [CVE-2000-0503](https://cve.now/CVE-2000-0503.md): The IFRAME of the WebBrowser control in Internet Explorer 5.01 allows a remote attacker to violate the cross frame security policy via the N (no CVSS)
- [CVE-2000-0509](https://cve.now/CVE-2000-0509.md): Buffer overflows in the finger and whois demonstration scripts in Sambar Server 4.3 allow remote attackers to execute arbitrary commands via (no CVSS)
- [CVE-2000-0520](https://cve.now/CVE-2000-0520.md): Buffer overflow in restore program 0.4b17 and earlier in dump package allows local users to execute arbitrary commands via a long tape name. (no CVSS)
- [CVE-2000-0524](https://cve.now/CVE-2000-0524.md): Microsoft Outlook and Outlook Express allow remote attackers to cause a denial of service by sending email messages with blank fields such a (no CVSS)
- [CVE-2000-0526](https://cve.now/CVE-2000-0526.md): mailview.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2000-0527](https://cve.now/CVE-2000-0527.md): userreg.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters. (no CVSS)
- [CVE-2000-0531](https://cve.now/CVE-2000-0531.md): Linux gpm program allows local users to cause a denial of service by flooding the /dev/gpmctl device with STREAM sockets. (no CVSS)
- [CVE-2000-0535](https://cve.now/CVE-2000-0535.md): OpenSSL 0.9.4 and OpenSSH for FreeBSD do not properly check for the existence of the /dev/random or /dev/urandom devices, which are absent o (no CVSS)
- [CVE-2000-0543](https://cve.now/CVE-2000-0543.md): The command port for PGP Certificate Server 2.5.0 and 2.5.1 allows remote attackers to cause a denial of service if their hostname does not (no CVSS)
- [CVE-2000-0544](https://cve.now/CVE-2000-0544.md): Windows NT and Windows 2000 hosts allow a remote attacker to cause a denial of service via malformed DCE/RPC SMBwriteX requests that contain (no CVSS)
- [CVE-2000-0545](https://cve.now/CVE-2000-0545.md): Buffer overflow in mailx mail command (aka Mail) on Linux systems allows local users to gain privileges via a long -c (carbon copy) paramete (no CVSS)
- [CVE-2000-0546](https://cve.now/CVE-2000-0546.md): Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the lastrealm variable in the set\_tgtkey (no CVSS)
- [CVE-2000-0547](https://cve.now/CVE-2000-0547.md): Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the localrealm variable in the process\_v4 (no CVSS)
- [CVE-2000-0554](https://cve.now/CVE-2000-0554.md): Ceilidh allows remote attackers to obtain the real path of the Ceilidh directory via the translated\_path hidden form field. (no CVSS)
- [CVE-2000-0559](https://cve.now/CVE-2000-0559.md): eTrust Intrusion Detection System (formerly SessionWall-3) uses weak encryption (XOR) to store administrative passwords in the registry, whi (no CVSS)
- [CVE-2000-0562](https://cve.now/CVE-2000-0562.md): BlackIce Defender 2.1 and earlier, and BlackIce Pro 2.0.23 and earlier, do not properly block Back Orifice traffic when the security setting (no CVSS)
- [CVE-2000-0563](https://cve.now/CVE-2000-0563.md): The URLConnection function in MacOS Runtime Java (MRJ) 2.1 and earlier and the Microsoft virtual machine (VM) for MacOS allows a malicious w (no CVSS)
- [CVE-2000-0564](https://cve.now/CVE-2000-0564.md): The guestbook CGI program in ICQ Web Front service for ICQ 2000a, 99b, and others allows remote attackers to cause a denial of service via a (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2000-07-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.