CVEs published September 21, 2000
48 CVEs were published on September 21, 2000: 0 critical, 0 high.
- Published
- 48
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 48
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- org.apache.tomcat:tomcat
- 1
Medium, low and unrated 48
- CVE-2000-0680The CVS 1.10.8 server does not properly restrict users from creating arbitrary Checkin.prog or Update.prog programs, which allows remote CVS
- CVE-2000-0686Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a ..
- CVE-2000-0687Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a ..
- CVE-2000-0688Subscribe Me LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privil
- CVE-2000-0689Account Manager LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain pri
- CVE-2000-0690Auction Weaver CGI script 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the fromfile pa
- CVE-2000-0691The faxrunq and faxrunqd in the mgetty package allows local users to create or modify arbitrary files via a symlink attack which creates a s
- CVE-2000-0692ISS RealSecure 3.2.1 and 3.2.2 allows remote attackers to cause a denial of service via a flood of fragmented packets with the SYN flag set.
- CVE-2000-0695Buffer overflows in pgxconfig in the Raptor GFX configuration tool allow local users to gain privileges via command line options.
- CVE-2000-0696The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests to its supporting CGI
- CVE-2000-0697The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execute commands via shell
- CVE-2000-0701The wrapper program in mailman 2.0beta3 and 2.0beta4 does not properly cleanse untrusted format strings, which allows local users to gain pr
- CVE-2000-0704Buffer overflow in SGI Omron WorldView Wnn allows remote attackers to execute arbitrary commands via long JS_OPEN, JS_MKDIR, or JS_FILE_INFO
- CVE-2000-0709The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to cause a denial of service in some compo
- CVE-2000-0710The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to determine the physical path of the serv
- CVE-2000-0713Buffer overflow in Adobe Acrobat 4.05, Reader, Business Tools, and Fill In products that handle PDF files allows attackers to execute arbitr
- CVE-2000-0714umb-scheme 3.2-11 for Red Hat Linux is installed with world-writeable files.
- CVE-2000-0715DiskCheck script diskcheck.pl in Red Hat Linux 6.2 allows local users to create or overwrite arbitrary files via a symlink attack on a tempo
- CVE-2000-0719VariCAD 7.0 is installed with world-writeable files, which allows local users to replace the VariCAD programs with a Trojan horse program.
- CVE-2000-0721The FSserial, FlagShip_c, and FlagShip_p programs in the FlagShip package are installed world-writeable, which allows local users to replace
- CVE-2000-0722Helix GNOME Updater helix-update 0.5 and earlier allows local users to install arbitrary RPM packages by creating the /tmp/helix-install ins
- CVE-2000-0723Helix GNOME Updater helix-update 0.5 and earlier does not properly create /tmp directories, which allows local users to create empty system
- CVE-2000-0724The go-gnome Helix GNOME pre-installer allows local users to overwrite arbitrary files via a symlink attack on various files in /tmp, includ
- CVE-2000-0734eEye IRIS 1.01 beta allows remote attackers to cause a denial of service via a large number of UDP connections.
- CVE-2000-0735Buffer overflow in Becky! Internet Mail client 1.26.03 and earlier allows remote attackers to cause a denial of service via a long Content-t
- CVE-2000-0736Buffer overflow in Becky! Internet Mail client 1.26.04 and earlier allows remote attackers to cause a denial of service via a long Content-t
- CVE-2000-0746Vulnerabilities in IIS 4.0 and 5.0 do not properly protect against cross-site scripting (CSS) attacks.
- CVE-2000-0748OpenLDAP 1.2.11 and earlier improperly installs the ud binary with group write permissions, which could allow any user in that group to repl
- CVE-2000-0752Buffer overflows in brouted in FreeBSD and possibly other OSes allows local users to gain root privileges via long command line arguments.
- CVE-2000-0755Vulnerability in the newgrp command in HP-UX 11.00 allows local users to gain privileges.
- CVE-2000-0756Microsoft Outlook 2000 does not properly process long or malformed fields in vCard (.vcf) files, which allows attackers to cause a denial of
- CVE-2000-0757The sysgen service in Aptis Totalbill does not perform authentication, which allows remote attackers to gain root privileges by connecting t
- CVE-2000-0759Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generatesorg.apache.tomcat:tomcat
- CVE-2000-0760The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexist
- CVE-2000-0769O'Reilly WebSite Pro 2.3.7 installs the uploader.exe program with execute permissions for all users, which allows remote attackers to create
- CVE-2000-0772The installation of Tumbleweed Messaging Management System (MMS) 4.6 and earlier (formerly Worldtalk Worldsecure) creates a default account
- CVE-2000-0774The sample Java servlet "test" in Bajie HTTP web server 0.30a reveals the real pathname of the web document root.
- CVE-2000-0775Buffer overflow in RobTex Viking server earlier than 1.06-370 allows remote attackers to cause a denial of service or execute arbitrary comm
- CVE-2000-0784sshd program in the Rapidstream 2.1 Beta VPN appliance has a hard-coded "rsadmin" account with a null password, which allows remote attacker
- CVE-2000-0785WircSrv IRC Server 5.07s allows IRC operators to read arbitrary files via the importmotd command, which sets the Message of the Day (MOTD) t
- CVE-2000-0789WinU 5.x and earlier uses weak encryption to store its configuration password, which allows local users to decrypt the password and gain pri
- CVE-2000-0791Trustix installs the httpsd program for Apache-SSL with world-writeable permissions, which allows local users to replace it with a Trojan ho
- CVE-2000-0793Norton AntiVirus 5.00.01C with the Novell Netware client does not properly restart the auto-protection service after the first user has logg
- CVE-2000-0794Buffer overflow in IRIX libgl.so library allows local users to gain root privileges via a long HOME variable to programs such as (1) gmemusa
- CVE-2000-0798The truncate function in IRIX 6.x does not properly check for privileges when the file is in the xfs file system, which allows local users t
- CVE-2000-0800String parsing error in rpc.kstatd in the linuxnfs or knfsd packages in SuSE and possibly other Linux systems allows remote attackers to gai
- CVE-2000-0801Buffer overflow in bdf program in HP-UX 11.00 may allow local users to gain root privileges via a long -t option.
- CVE-2000-0802The BAIR program does not properly restrict access to the Internet Explorer Internet options menu, which allows local users to obtain access