# CVEs published 2000-08-03

15 CVEs were published on August 3, 2000: 0 critical, 0 high. Days are UTC.

- [CVE-2000-0623](https://cve.now/CVE-2000-0623.md): Buffer overflow in O'Reilly WebSite Professional web server 2.4 and earlier allows remote attackers to execute arbitrary commands via a long (no CVSS)
- [CVE-2000-0625](https://cve.now/CVE-2000-0625.md): NetZero 3.0 and earlier uses weak encryption for storing a user's login information, which allows a local user to decrypt the password. (no CVSS)
- [CVE-2000-0626](https://cve.now/CVE-2000-0626.md): Buffer overflow in Alibaba web server allows remote attackers to cause a denial of service via a long GET request. (no CVSS)
- [CVE-2000-0629](https://cve.now/CVE-2000-0629.md): The default configuration of the Sun Java web server 2.0 and earlier allows remote attackers to execute arbitrary commands by uploading Java (no CVSS)
- [CVE-2000-0645](https://cve.now/CVE-2000-0645.md): WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by using the RESTART (REST) command and writing beyond the end (no CVSS)
- [CVE-2000-0646](https://cve.now/CVE-2000-0646.md): WFTPD and WFTPD Pro 2.41 allows remote attackers to obtain the real pathname for a file by executing a STATUS (STAT) command while the file (no CVSS)
- [CVE-2000-0647](https://cve.now/CVE-2000-0647.md): WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by executing an MLST command before logging into the server. (no CVSS)
- [CVE-2000-0648](https://cve.now/CVE-2000-0648.md): WFTPD and WFTPD Pro 2.41 allows local users to cause a denial of service by executing the RENAME TO (RNTO) command before a RENAME FROM (RNF (no CVSS)
- [CVE-2000-0649](https://cve.now/CVE-2000-0649.md): IIS 4.0 allows remote attackers to obtain the internal IP address of the server via an HTTP 1.0 request for a web page which is protected by (no CVSS)
- [CVE-2000-0653](https://cve.now/CVE-2000-0653.md): Microsoft Outlook Express allows remote attackers to monitor a user's email by creating a persistent browser link to the Outlook Express win (no CVSS)
- [CVE-2000-0656](https://cve.now/CVE-2000-0656.md): Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long USER command in the (no CVSS)
- [CVE-2000-0657](https://cve.now/CVE-2000-0657.md): Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long HELO command in the (no CVSS)
- [CVE-2000-0658](https://cve.now/CVE-2000-0658.md): Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long USER command in the (no CVSS)
- [CVE-2000-0659](https://cve.now/CVE-2000-0659.md): Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long user ID in a SOCKS4 (no CVSS)
- [CVE-2000-0667](https://cve.now/CVE-2000-0667.md): Vulnerability in gpm in Caldera Linux allows local users to delete arbitrary files or conduct a denial of service. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2000-08-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.