# CVEs published 2000-09-21

48 CVEs were published on September 21, 2000: 0 critical, 0 high. Days are UTC.

- [CVE-2000-0680](https://cve.now/CVE-2000-0680.md): The CVS 1.10.8 server does not properly restrict users from creating arbitrary Checkin.prog or Update.prog programs, which allows remote CVS (no CVSS)
- [CVE-2000-0686](https://cve.now/CVE-2000-0686.md): Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2000-0687](https://cve.now/CVE-2000-0687.md): Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2000-0688](https://cve.now/CVE-2000-0688.md): Subscribe Me LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privil (no CVSS)
- [CVE-2000-0689](https://cve.now/CVE-2000-0689.md): Account Manager LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain pri (no CVSS)
- [CVE-2000-0690](https://cve.now/CVE-2000-0690.md): Auction Weaver CGI script 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the fromfile pa (no CVSS)
- [CVE-2000-0691](https://cve.now/CVE-2000-0691.md): The faxrunq and faxrunqd in the mgetty package allows local users to create or modify arbitrary files via a symlink attack which creates a s (no CVSS)
- [CVE-2000-0692](https://cve.now/CVE-2000-0692.md): ISS RealSecure 3.2.1 and 3.2.2 allows remote attackers to cause a denial of service via a flood of fragmented packets with the SYN flag set. (no CVSS)
- [CVE-2000-0695](https://cve.now/CVE-2000-0695.md): Buffer overflows in pgxconfig in the Raptor GFX configuration tool allow local users to gain privileges via command line options. (no CVSS)
- [CVE-2000-0696](https://cve.now/CVE-2000-0696.md): The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests to its supporting CGI (no CVSS)
- [CVE-2000-0697](https://cve.now/CVE-2000-0697.md): The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execute commands via shell (no CVSS)
- [CVE-2000-0701](https://cve.now/CVE-2000-0701.md): The wrapper program in mailman 2.0beta3 and 2.0beta4 does not properly cleanse untrusted format strings, which allows local users to gain pr (no CVSS)
- [CVE-2000-0704](https://cve.now/CVE-2000-0704.md): Buffer overflow in SGI Omron WorldView Wnn allows remote attackers to execute arbitrary commands via long JS\_OPEN, JS\_MKDIR, or JS\_FILE\_INFO (no CVSS)
- [CVE-2000-0709](https://cve.now/CVE-2000-0709.md): The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to cause a denial of service in some compo (no CVSS)
- [CVE-2000-0710](https://cve.now/CVE-2000-0710.md): The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to determine the physical path of the serv (no CVSS)
- [CVE-2000-0713](https://cve.now/CVE-2000-0713.md): Buffer overflow in Adobe Acrobat 4.05, Reader, Business Tools, and Fill In products that handle PDF files allows attackers to execute arbitr (no CVSS)
- [CVE-2000-0714](https://cve.now/CVE-2000-0714.md): umb-scheme 3.2-11 for Red Hat Linux is installed with world-writeable files. (no CVSS)
- [CVE-2000-0715](https://cve.now/CVE-2000-0715.md): DiskCheck script diskcheck.pl in Red Hat Linux 6.2 allows local users to create or overwrite arbitrary files via a symlink attack on a tempo (no CVSS)
- [CVE-2000-0719](https://cve.now/CVE-2000-0719.md): VariCAD 7.0 is installed with world-writeable files, which allows local users to replace the VariCAD programs with a Trojan horse program. (no CVSS)
- [CVE-2000-0721](https://cve.now/CVE-2000-0721.md): The FSserial, FlagShip\_c, and FlagShip\_p programs in the FlagShip package are installed world-writeable, which allows local users to replace (no CVSS)
- [CVE-2000-0722](https://cve.now/CVE-2000-0722.md): Helix GNOME Updater helix-update 0.5 and earlier allows local users to install arbitrary RPM packages by creating the /tmp/helix-install ins (no CVSS)
- [CVE-2000-0723](https://cve.now/CVE-2000-0723.md): Helix GNOME Updater helix-update 0.5 and earlier does not properly create /tmp directories, which allows local users to create empty system (no CVSS)
- [CVE-2000-0724](https://cve.now/CVE-2000-0724.md): The go-gnome Helix GNOME pre-installer allows local users to overwrite arbitrary files via a symlink attack on various files in /tmp, includ (no CVSS)
- [CVE-2000-0734](https://cve.now/CVE-2000-0734.md): eEye IRIS 1.01 beta allows remote attackers to cause a denial of service via a large number of UDP connections. (no CVSS)
- [CVE-2000-0735](https://cve.now/CVE-2000-0735.md): Buffer overflow in Becky! Internet Mail client 1.26.03 and earlier allows remote attackers to cause a denial of service via a long Content-t (no CVSS)
- [CVE-2000-0736](https://cve.now/CVE-2000-0736.md): Buffer overflow in Becky! Internet Mail client 1.26.04 and earlier allows remote attackers to cause a denial of service via a long Content-t (no CVSS)
- [CVE-2000-0746](https://cve.now/CVE-2000-0746.md): Vulnerabilities in IIS 4.0 and 5.0 do not properly protect against cross-site scripting (CSS) attacks. (no CVSS)
- [CVE-2000-0748](https://cve.now/CVE-2000-0748.md): OpenLDAP 1.2.11 and earlier improperly installs the ud binary with group write permissions, which could allow any user in that group to repl (no CVSS)
- [CVE-2000-0752](https://cve.now/CVE-2000-0752.md): Buffer overflows in brouted in FreeBSD and possibly other OSes allows local users to gain root privileges via long command line arguments. (no CVSS)
- [CVE-2000-0755](https://cve.now/CVE-2000-0755.md): Vulnerability in the newgrp command in HP-UX 11.00 allows local users to gain privileges. (no CVSS)
- [CVE-2000-0756](https://cve.now/CVE-2000-0756.md): Microsoft Outlook 2000 does not properly process long or malformed fields in vCard (.vcf) files, which allows attackers to cause a denial of (no CVSS)
- [CVE-2000-0757](https://cve.now/CVE-2000-0757.md): The sysgen service in Aptis Totalbill does not perform authentication, which allows remote attackers to gain root privileges by connecting t (no CVSS)
- [CVE-2000-0759](https://cve.now/CVE-2000-0759.md): Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates (no CVSS, org.apache.tomcat:tomcat)
- [CVE-2000-0760](https://cve.now/CVE-2000-0760.md): The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexist (no CVSS)
- [CVE-2000-0769](https://cve.now/CVE-2000-0769.md): O'Reilly WebSite Pro 2.3.7 installs the uploader.exe program with execute permissions for all users, which allows remote attackers to create (no CVSS)
- [CVE-2000-0772](https://cve.now/CVE-2000-0772.md): The installation of Tumbleweed Messaging Management System (MMS) 4.6 and earlier (formerly Worldtalk Worldsecure) creates a default account (no CVSS)
- [CVE-2000-0774](https://cve.now/CVE-2000-0774.md): The sample Java servlet "test" in Bajie HTTP web server 0.30a reveals the real pathname of the web document root. (no CVSS)
- [CVE-2000-0775](https://cve.now/CVE-2000-0775.md): Buffer overflow in RobTex Viking server earlier than 1.06-370 allows remote attackers to cause a denial of service or execute arbitrary comm (no CVSS)
- [CVE-2000-0784](https://cve.now/CVE-2000-0784.md): sshd program in the Rapidstream 2.1 Beta VPN appliance has a hard-coded "rsadmin" account with a null password, which allows remote attacker (no CVSS)
- [CVE-2000-0785](https://cve.now/CVE-2000-0785.md): WircSrv IRC Server 5.07s allows IRC operators to read arbitrary files via the importmotd command, which sets the Message of the Day (MOTD) t (no CVSS)
- [CVE-2000-0789](https://cve.now/CVE-2000-0789.md): WinU 5.x and earlier uses weak encryption to store its configuration password, which allows local users to decrypt the password and gain pri (no CVSS)
- [CVE-2000-0791](https://cve.now/CVE-2000-0791.md): Trustix installs the httpsd program for Apache-SSL with world-writeable permissions, which allows local users to replace it with a Trojan ho (no CVSS)
- [CVE-2000-0793](https://cve.now/CVE-2000-0793.md): Norton AntiVirus 5.00.01C with the Novell Netware client does not properly restart the auto-protection service after the first user has logg (no CVSS)
- [CVE-2000-0794](https://cve.now/CVE-2000-0794.md): Buffer overflow in IRIX libgl.so library allows local users to gain root privileges via a long HOME variable to programs such as (1) gmemusa (no CVSS)
- [CVE-2000-0798](https://cve.now/CVE-2000-0798.md): The truncate function in IRIX 6.x does not properly check for privileges when the file is in the xfs file system, which allows local users t (no CVSS)
- [CVE-2000-0800](https://cve.now/CVE-2000-0800.md): String parsing error in rpc.kstatd in the linuxnfs or knfsd packages in SuSE and possibly other Linux systems allows remote attackers to gai (no CVSS)
- [CVE-2000-0801](https://cve.now/CVE-2000-0801.md): Buffer overflow in bdf program in HP-UX 11.00 may allow local users to gain root privileges via a long -t option. (no CVSS)
- [CVE-2000-0802](https://cve.now/CVE-2000-0802.md): The BAIR program does not properly restrict access to the Internet Explorer Internet options menu, which allows local users to obtain access (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2000-09-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.