CVEs published October 13, 2000
261 CVEs were published on October 13, 2000: 0 critical, 0 high.
- Published
- 261
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 261
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- zope
- 2
Medium, low and unrated 261
- CVE-1999-0145Sendmail WIZ command enabled, allowing root access.
- CVE-1999-0247Buffer overflow in nnrpd program in INN up to version 1.6 allows remote users to execute arbitrary commands.
- CVE-1999-0248A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credentials.
- CVE-1999-0358Digital Unix 4.0 has a buffer overflow in the inc program of the mh package.
- CVE-1999-0393Remote attackers can cause a denial of service in Sendmail 8.8.x and 8.9.2 by sending messages with a large number of headers.
- CVE-1999-0395A race condition in the BackWeb Polite Agent Protocol allows an attacker to spoof a BackWeb server.
- CVE-1999-0403A bug in Cyrix CPUs on Linux allows local users to perform a denial of service.
- CVE-1999-0429The Lotus Notes 4.5 client may send a copy of encrypted mail in the clear across the network if the user does not set the "Encrypt Saved Mai
- CVE-1999-0440The byte code verifier component of the Java Virtual Machine (JVM) allows remote execution through malicious web pages.
- CVE-1999-0671Buffer overflow in ToxSoft NextFTP client through CWD command.
- CVE-1999-0672Buffer overflow in Fujitsu Chocoa IRC client via IRC channel topics.
- CVE-1999-0675Check Point FireWall-1 can be subjected to a denial of service via UDP packets that are sent through VPN-1 to port 0 of a host.
- CVE-1999-0679Buffer overflow in hybrid-6 IRC server commonly used on EFnet allows remote attackers to execute commands via m_invite invite option.
- CVE-1999-0697SCO Doctor allows local users to gain root privileges through a Tools option.
- CVE-1999-0759Buffer overflow in FuseMAIL POP service via long USER and PASS commands.
- CVE-1999-0787The SSH authentication agent follows symlinks via a UNIX domain socket.
- CVE-1999-0788Arkiea nlservd allows remote attackers to conduct a denial of service.
- CVE-1999-0791Hybrid Network cable modems do not include an authentication mechanism for administration, allowing remote attackers to compromise the syste
- CVE-1999-0823Buffer overflow in FreeBSD xmindpath allows local users to gain privileges via -f argument.
- CVE-1999-0826Buffer overflow in FreeBSD angband allows local users to gain privileges.
- CVE-1999-0873Buffer overflow in Skyfull mail server via MAIL FROM command.
- CVE-1999-0904Buffer overflow in BFTelnet allows remote attackers to cause a denial of service via a long username.
- CVE-1999-0912FreeBSD VFS cache (vfs_cache) allows local users to cause a denial of service by opening a large number of files.
- CVE-1999-0927NTMail allows remote attackers to read arbitrary files via a ..
- CVE-1999-0928Buffer overflow in SmartDesk WebSuite allows remote attackers to cause a denial of service via a long URL.
- CVE-1999-0932Mediahouse Statistics Server allows remote attackers to read the administrator password, which is stored in cleartext in the ss.cfg file.
- CVE-1999-0942UnixWare dos7utils allows a local user to gain root privileges by using the STATICMERGE environmental variable to find a script which it exe
- CVE-1999-0946Buffer overflow in Yamaha MidiPlug via a Text variable in an EMBED tag.
- CVE-1999-0954WWWBoard has a default username and default password.
- CVE-1999-0971Buffer overflow in Exim allows local users to gain root privileges via a long :include: option in a .forward file.
- CVE-1999-1004Buffer overflow in the POP server POProxy for the Norton Anti-Virus protection NAV2000 program via a large USER command.
- CVE-2000-0002Buffer overflow in ZBServer Pro 1.50 allows remote attackers to execute commands via a long GET request.
- CVE-2000-0009The bna_pass program in Optivity NETarchitect uses the PATH environmental variable for finding the "rm" program, which allows local users to
- CVE-2000-0056IMail IMONITOR status.cgi CGI script allows remote attackers to cause a denial of service with many calls to status.cgi.
- CVE-2000-0063cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to read arbitrary files by specifying the filename in a parameter
- CVE-2000-0064cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to cause a denial of service via a malformed URL that includes sh
- CVE-2000-0065Buffer overflow in InetServ 3.0 allows remote attackers to execute commands via a long GET request.
- CVE-2000-0075Super Mail Transfer Package (SMTP), later called MsgCore, has a memory leak which allows remote attackers to cause a denial of service by re
- CVE-2000-0076nviboot boot script in the Debian nvi package allows local users to delete files via malformed entries in vi.recover.
- CVE-2000-0090VMWare 1.1.2 allows local users to cause a denial of service via a symlink attack.
- CVE-2000-0094procfs in BSD systems allows local users to gain root privileges by modifying the /proc/pid/mem interface via a modified file descriptor for
- CVE-2000-0116Firewall-1 does not properly filter script tags, which allows remote attackers to bypass the "Strip Script Tags" restriction by including an
- CVE-2000-0117The siteUserMod.cgi program in Cobalt RaQ2 servers allows any Site Administrator to modify passwords for other users, site administrators, a
- CVE-2000-0127The Webspeed configuration program does not properly disable access to the WSMadmin utility, which allows remote attackers to gain privilege
- CVE-2000-0128The Finger Server 0.82 allows remote attackers to execute commands via shell metacharacters.
- CVE-2000-0130Buffer overflow in SCO scohelp program allows remote attackers to execute commands.
- CVE-2000-0141Infopop Ultimate Bulletin Board (UBB) allows remote attackers to execute commands via shell metacharacters in the topic hidden field.
- CVE-2000-0146The Java Server in the Novell GroupWise Web Access Enhancement Pack allows remote attackers to cause a denial of service via a long URL to t
- CVE-2000-0164The installation of Sun Internet Mail Server (SIMS) creates a world-readable file that allows local users to obtain passwords.
- CVE-2000-0166Buffer overflow in the InterAccess telnet server TelnetD allows remote attackers to execute commands via a long login name.
- CVE-2000-0179HP OpenView OmniBack 2.55 allows remote attackers to cause a denial of service via a large number of connections to port 5555.
- CVE-2000-0191Axis StorPoint CD allows remote attackers to access administrator URLs without authentication via a ..
- CVE-2000-0193The default configuration of Dosemu in Corel Linux 1.0 allows local users to execute the system.com program and gain privileges.
- CVE-2000-0225The Pocsag POC32 program does not properly prevent remote users from accessing its server port, even if the option has been disabled.
- CVE-2000-0237Netscape Enterprise Server with Web Publishing enabled allows remote attackers to list arbitrary directories via a GET request for the /publ
- CVE-2000-0238Buffer overflow in the web server for Norton AntiVirus for Internet Email Gateways allows remote attackers to cause a denial of service via
- CVE-2000-0240vqSoft vqServer program allows remote attackers to read arbitrary files via a /........../ in the URL, a variation of a ..
- CVE-2000-0257Buffer overflow in the NetWare remote web administration utility allows remote attackers to cause a denial of service or execute commands vi
- CVE-2000-0263The X font server xfs in Red Hat Linux 6.x allows an attacker to cause a denial of service via a malformed request.
- CVE-2000-0265Panda Security 3.0 allows users to uninstall the Panda software via its Add/Remove Programs applet.
- CVE-2000-0272RealNetworks RealServer allows remote attackers to cause a denial of service by sending malformed input to the server at port 7070.
- CVE-2000-0273PCAnywhere allows remote attackers to cause a denial of service by terminating the connection before PCAnywhere provides a login prompt.
- CVE-2000-0282TalentSoft webpsvr daemon in the Web+ shopping cart application allows remote attackers to read arbitrary files via a ..
- CVE-2000-0285Buffer overflow in XFree86 3.3.x allows local users to execute arbitrary commands via a long -xkbmap parameter.
- CVE-2000-0289IP masquerading in Linux 2.2.x allows remote attackers to route UDP packets through the internal interface by modifying the external source
- CVE-2000-0301Ipswitch IMAIL server 6.02 and earlier allows remote attackers to cause a denial of service via the AUTH CRAM-MD5 command.
- CVE-2000-0318Atrium Mercur Mail Server 3.2 allows local attackers to read other user's email and create arbitrary files via a dot dot (..) attack.
- CVE-2000-0319mail.local in Sendmail 8.10.x does not properly identify the .\n string which identifies the end of message text, which allows a remote atta
- CVE-2000-0320Qpopper 2.53 and 3.0 does not properly identify the \n string which identifies the end of message text, which allows a remote attacker to ca
- CVE-2000-0322The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metachar
- CVE-2000-0332UltraBoard.pl or UltraBoard.cgi CGI scripts in UltraBoard 1.6 allows remote attackers to read arbitrary files via a pathname string that inc
- CVE-2000-0335The resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS query results.
- CVE-2000-0338Concurrent Versions Software (CVS) uses predictable temporary file names for locking, which allows local users to cause a denial of service
- CVE-2000-0340Buffer overflow in Gnomelib in SuSE Linux 6.3 allows local users to execute arbitrary commands via the DISPLAY environmental variable.
- CVE-2000-0344The knfsd NFS server in Linux kernel 2.2.x allows remote attackers to cause a denial of service via a negative size value.
- CVE-2000-0347Windows 95 and Windows 98 allow a remote attacker to cause a denial of service via a NetBIOS session request packet with a NULL source name.
- CVE-2000-0366dump in Debian GNU/Linux 2.1 does not properly restore symlinks, which allows a local user to modify the ownership of arbitrary files.
- CVE-2000-0369The IDENT server in Caldera Linux 2.3 creates multiple threads for each IDENT request, which allows remote attackers to cause a denial of se
- CVE-2000-0374The default configuration of kdm in Caldera and Mandrake Linux, and possibly other distributions, allows XDMCP connections from any host, wh
- CVE-2000-0378The pam_console PAM module in Linux systems performs a chown on various devices upon a user login, but an open file descriptor for those dev
- CVE-2000-0426UltraBoard 1.6 and other versions allow remote attackers to cause a denial of service by referencing UltraBoard in the Session parameter, wh
- CVE-2000-0430Cart32 allows remote attackers to access sensitive debugging information by appending /expdate to the URL request.
- CVE-2000-0440NetBSD 1.4.2 and earlier allows remote attackers to cause a denial of service by sending a packet with an unaligned IP timestamp option.
- CVE-2000-0443The web interface server in HP Web JetAdmin 5.6 allows remote attackers to read arbitrary files via a ..
- CVE-2000-0445The pgpk command in PGP 5.x on Unix systems uses an insufficiently random data source for non-interactive key pair generation, which may pro
- CVE-2000-0446Buffer overflow in MDBMS database server allows remote attackers to execute arbitrary commands via a long string.
- CVE-2000-0447Buffer overflow in WebShield SMTP 4.5.44 allows remote attackers to execute arbitrary commands via a long configuration parameter to the Web
- CVE-2000-0448The WebShield SMTP Management Tool version 4.5.44 does not properly restrict access to the management port when an IP address does not resol
- CVE-2000-0451The Intel express 8100 ISDN router allows remote attackers to cause a denial of service via oversized or fragmented ICMP packets.
- CVE-2000-0458The MSWordView application in IMP creates world-readable files in the /tmp directory, which allows other local users to read potentially sen
- CVE-2000-0459IMP does not remove files properly if the MSWordView application quits, which allows local users to cause a denial of service by filling up
- CVE-2000-0466AIX cdmount allows local users to gain root privileges via shell metacharacters.
- CVE-2000-0467Buffer overflow in Linux splitvt 1.6.3 and earlier allows local users to gain root privileges via a long password in the screen locking func
- CVE-2000-0468man in HP-UX 10.20 and 11 allows local attackers to overwrite files via a symlink attack.
- CVE-2000-0469Selena Sol WebBanner 4.0 allows remote attackers to read arbitrary files via a ..
- CVE-2000-0470Allegro RomPager HTTP server allows remote attackers to cause a denial of service via a malformed authentication request.
- CVE-2000-0471Buffer overflow in ufsrestore in Solaris 8 and earlier allows local users to gain root privileges via a long pathname.
- CVE-2000-0472Buffer overflow in innd 2.2.2 allows remote attackers to execute arbitrary commands via a cancel request containing a long message ID.
- CVE-2000-0474Real Networks RealServer 7.x allows remote attackers to cause a denial of service via a malformed request for a page in the viewsource direc
- CVE-2000-0475Windows 2000 allows a local user process to access another user's desktop within the same windows station, aka the "Desktop Separation" vuln
- CVE-2000-0477Buffer overflow in Norton Antivirus for Exchange (NavExchange) allows remote attackers to cause a denial of service via a .zip file that con
- CVE-2000-0478In some cases, Norton Antivirus for Exchange (NavExchange) enters a "fail-open" state which allows viruses to pass through the server.
- CVE-2000-0481Buffer overflow in KDE Kmail allows a remote attacker to cause a denial of service via an attachment with a long file name.
- CVE-2000-0482Check Point Firewall-1 allows remote attackers to cause a denial of service by sending a large number of malformed fragmented IP packets.
- CVE-2000-0483The DocumentTemplate package in Zope 2.2 and earlier allows a remote attacker to modify DTMLDocuments or DTMLMethods without authorization.zope
- CVE-2000-0484Small HTTP Server ver 3.06 contains a memory corruption bug causing a memory overflow.
- CVE-2000-0485Microsoft SQL Server allows local users to obtain database passwords via the Data Transformation Service (DTS) package Properties dialog, ak
- CVE-2000-0486Buffer overflow in Cisco TACACS+ tac_plus server allows remote attackers to cause a denial of service via a malformed packet with a long len
- CVE-2000-0489FreeBSD, NetBSD, and OpenBSD allow an attacker to cause a denial of service by creating a large number of socket pairs using the socketpair
- CVE-2000-0490Buffer overflow in the NetWin DSMTP 2.7q in the NetWin dmail package allows remote attackers to execute arbitrary commands via a long ETRN r
- CVE-2000-0493Buffer overflow in Simple Network Time Sync (SMTS) daemon allows remote attackers to cause a denial of service and possibly execute arbitrar
- CVE-2000-0494Veritas Volume Manager creates a world writable .server_pids file, which allows local users to add arbitrary commands into the file, which i
- CVE-2000-0495Microsoft Windows Media Encoder allows remote attackers to cause a denial of service via a malformed request, aka the "Malformed Windows Med
- CVE-2000-0497IBM WebSphere server 3.0.2 allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extensio
- CVE-2000-0499The default configuration of BEA WebLogic 3.1.8 through 4.5.1 allows a remote attacker to view source code of a JSP program by requesting a
- CVE-2000-0500The default configuration of BEA WebLogic 5.1.0 allows a remote attacker to view source code of programs by requesting a URL beginning with
- CVE-2000-0501Race condition in MDaemon 2.8.5.0 POP server allows local users to cause a denial of service by entering a UIDL command and quickly exiting
- CVE-2000-0505The Apache 1.3.x HTTP server for Windows platforms allows remote attackers to list directory contents by requesting a URL containing a large
- CVE-2000-0506The "capabilities" feature in Linux before 2.2.16 allows local users to cause a denial of service or gain privileges by setting the capabili
- CVE-2000-0507Imate Webmail Server 2.5 allows remote attackers to cause a denial of service via a long HELO command.
- CVE-2000-0508rpc.lockd in Red Hat Linux 6.1 and 6.2 allows remote attackers to cause a denial of service via a malformed request.
- CVE-2000-0510CUPS (Common Unix Printing System) 1.04 and earlier allows remote attackers to cause a denial of service via a malformed IPP request.
- CVE-2000-0511CUPS (Common Unix Printing System) 1.04 and earlier allows remote attackers to cause a denial of service via a CGI POST request.
- CVE-2000-0512CUPS (Common Unix Printing System) 1.04 and earlier does not properly delete request files, which allows a remote attacker to cause a denial
- CVE-2000-0513CUPS (Common Unix Printing System) 1.04 and earlier allows remote attackers to cause a denial of service by authenticating with a user name
- CVE-2000-0514GSSFTP FTP daemon in Kerberos 5 1.1.x does not properly restrict access to some FTP commands, which allows remote attackers to cause a denia
- CVE-2000-0515The snmpd.conf configuration file for the SNMP daemon (snmpd) in HP-UX 11.0 is world writable, which allows local users to modify SNMP confi
- CVE-2000-0516When configured to store configuration information in an LDAP directory, Shiva Access Manager 5.0.0 stores the root DN (Distinguished Name)
- CVE-2000-0517Netscape 4.73 and earlier does not properly warn users about a potentially invalid certificate if the user has previously accepted the certi
- CVE-2000-0518Internet Explorer 4.x and 5.x does not properly verify all contents of an SSL certificate if a connection is made to the server via an image
- CVE-2000-0519Internet Explorer 4.x and 5.x does not properly re-validate an SSL certificate if the user establishes a new SSL session with the same serve
- CVE-2000-0521Savant web server allows remote attackers to read source code of CGI scripts via a GET request that does not include the HTTP version number
- CVE-2000-0522RSA ACE/Server allows remote attackers to cause a denial of service by flooding the server's authentication request port with UDP packets, w
- CVE-2000-0525OpenSSH does not properly drop privileges when the UseLogin option is enabled, which allows local users to execute arbitrary commands by pro
- CVE-2000-0528Net Tools PKI Server does not properly restrict access to remote attackers when the XUDA template files do not contain absolute pathnames fo
- CVE-2000-0529Net Tools PKI Server allows remote attackers to cause a denial of service via a long HTTP request.
- CVE-2000-0530The KApplication class in the KDE 1.1.2 configuration file management capability allows local users to overwrite arbitrary files.
- CVE-2000-0532A FreeBSD patch for SSH on 2000-01-14 configures ssh to listen on port 722 as well as port 22, which might allow remote attackers to access
- CVE-2000-0533Vulnerability in cvconnect in SGI IRIX WorkShop allows local users to overwrite arbitrary files.
- CVE-2000-0534The apsfilter software in the FreeBSD ports package does not properly read user filter configurations, which allows local users to execute c
- CVE-2000-0536xinetd 2.1.8.x does not properly restrict connections if hostnames are used for access control and the connecting host does not have a rever
- CVE-2000-0537BRU backup software allows local users to append data to arbitrary files by specifying an alternate configuration file with the BRUEXECLOG e
- CVE-2000-0538ColdFusion Administrator for ColdFusion 4.5.1 and earlier allows remote attackers to cause a denial of service via a long login password.
- CVE-2000-0539Servlet examples in Allaire JRun 2.3.x allow remote attackers to obtain sensitive information, e.g.
- CVE-2000-0540JSP sample files in Allaire JRun 2.3.x allow remote attackers to access arbitrary files (e.g.
- CVE-2000-0548Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the e_msg variable in the kerb_err_reply
- CVE-2000-0549Kerberos 4 KDC program does not properly check for null termination of AUTH_MSG_KDC_REQUEST requests, which allows remote attackers to cause
- CVE-2000-0550Kerberos 4 KDC program improperly frees memory twice (aka "double-free"), which allows remote attackers to cause a denial of service.
- CVE-2000-0552ICQwebmail client for ICQ 2000A creates a world readable temporary file during login and does not delete it, which allows local users to obt
- CVE-2000-0553Race condition in IPFilter firewall 3.4.3 and earlier, when configured with overlapping "return-rst" and "keep state" rules, allows remote a
- CVE-2000-0555Ceilidh allows remote attackers to cause a denial of service via a large number of POST requests.
- CVE-2000-0556Buffer overflow in the web interface for Cmail 2.4.7 allows remote attackers to cause a denial of service by sending a large user name to th
- CVE-2000-0557Buffer overflow in the web interface for Cmail 2.4.7 allows remote attackers to execute arbitrary commands via a long GET request.
- CVE-2000-0558Buffer overflow in HP Openview Network Node Manager 6.1 allows remote attackers to execute arbitrary commands via the Alarm service (OVALARM
- CVE-2000-0561Buffer overflow in WebBBS 1.15 allows remote attackers to execute arbitrary commands via a long HTTP GET request.
- CVE-2000-0566makewhatis in Linux man package allows local users to overwrite files via a symlink attack.
- CVE-2000-0567Buffer overflow in Microsoft Outlook and Outlook Express allows remote attackers to execute arbitrary commands via a long Date field in an e
- CVE-2000-0571LocalWEB HTTP server 1.2.0 allows remote attackers to cause a denial of service via a long GET request.
- CVE-2000-0579IRIX crontab creates temporary files with predictable file names and with the umask of the user, which could allow local users to modify ano
- CVE-2000-0582Check Point FireWall-1 4.0 and 4.1 allows remote attackers to cause a denial of service by sending a stream of invalid commands (such as bin
- CVE-2000-0583vchkpw program in vpopmail before version 4.8 does not properly cleanse an untrusted format string used in a call to syslog, which allows re
- CVE-2000-0584Buffer overflow in Canna input system allows remote attackers to execute arbitrary commands via an SR_INIT command with a long user name or
- CVE-2000-0585ISC DHCP client program dhclient allows remote attackers to execute arbitrary commands via shell metacharacters.
- CVE-2000-0586Buffer overflow in Dalnet IRC server 4.6.5 allows remote attackers to cause a denial of service or execute arbitrary commands via the SUMMON
- CVE-2000-0587The privpath directive in glftpd 1.18 allows remote attackers to bypass access restrictions for directories by using the file name completio
- CVE-2000-0588SawMill 5.0.21 CGI program allows remote attackers to read the first line of arbitrary files by listing the file in the rfcf parameter, whos
- CVE-2000-0591Novell BorderManager 3.0 and 3.5 allows remote attackers to bypass URL filtering by encoding characters in the requested URL.
- CVE-2000-0594BitchX IRC client does not properly cleanse an untrusted format string, which allows remote attackers to cause a denial of service via an in
- CVE-2000-0595libedit searches for the .editrc file in the current directory instead of the user's home directory, which may allow local users to execute
- CVE-2000-0596Internet Explorer 5.x does not warn a user before opening a Microsoft Access database file that is referenced within ActiveX OBJECT tags in
- CVE-2000-0597Microsoft Office 2000 (Excel and PowerPoint) and PowerPoint 97 are marked as safe for scripting, which allows remote attackers to force Inte
- CVE-2000-0598Fortech Proxy+ allows remote attackers to bypass access restrictions for to the administration service by redirecting their connections thro
- CVE-2000-0599Buffer overflow in iMesh 1.02 allows remote attackers to execute arbitrary commands via a long string to the iMesh port.
- CVE-2000-0601LeafChat 1.7 IRC client allows a remote IRC server to cause a denial of service by rapidly sending a large amount of error messages.
- CVE-2000-0602Secure Locate (slocate) in Red Hat Linux allows local users to gain privileges via a malformed configuration file that is specified in the L
- CVE-2000-0603Microsoft SQL Server 7.0 allows a local user to bypass permissions for stored procedures by referencing them via a temporary stored procedur
- CVE-2000-0604gkermit in Red Hat Linux is improperly installed with setgid uucp, which allows local users to modify files owned by uucp.
- CVE-2000-0610NetWin dMailWeb and cwMail 2.6g and earlier allows remote attackers to bypass authentication and use the server for mail relay via a usernam
- CVE-2000-0611The default configuration of NetWin dMailWeb and cwMail trusts all POP servers, which allows attackers to bypass normal authentication and c
- CVE-2000-0613Cisco Secure PIX Firewall does not properly identify forged TCP Reset (RST) packets, which allows remote attackers to force the firewall to
- CVE-2000-0616Vulnerability in HP TurboIMAGE DBUTIL allows local users to gain additional privileges via DBUTIL.PUB.SYS.
- CVE-2000-0621Microsoft Outlook 98 and 2000, and Outlook Express 4.0x and 5.0x, allow remote attackers to read files on the client's system via a malforme
- CVE-2000-0624Buffer overflow in Winamp 2.64 and earlier allows remote attackers to execute arbitrary commands via a long #EXTINF: extension in the M3U pl
- CVE-2000-0627BlackBoard CourseInfo 4.0 does not properly authenticate users, which allows local users to modify CourseInfo database information and gain
- CVE-2000-0628The source.asp example script in the Apache ASP module Apache::ASP 1.93 and earlier allows remote attackers to modify files.
- CVE-2000-0630IIS 4.0 and 5.0 allows remote attackers to obtain fragments of source code by appending a +.htr to the URL, a variant of the "File Fragment
- CVE-2000-0631An administrative script from IIS 3.0, later included in IIS 4.0 and 5.0, allows remote attackers to cause a denial of service by accessing
- CVE-2000-0632Buffer overflow in the web archive component of L-Soft Listserv 1.8d and earlier allows remote attackers to execute arbitrary commands via a
- CVE-2000-0633Vulnerability in Mandrake Linux usermode package allows local users to to reboot or halt the system.
- CVE-2000-0634The web administration interface for CommuniGate Pro 3.2.5 and earlier allows remote attackers to read arbitrary files via a ..
- CVE-2000-0635The view_page.html sample page in the MiniVend shopping cart program allows remote attackers to execute arbitrary commands via shell metacha
- CVE-2000-0636HP JetDirect printers versions G.08.20 and H.08.20 and earlier allow remote attackers to cause a denial of service via a malformed FTP quote
- CVE-2000-0637Microsoft Excel 97 and 2000 allows an attacker to execute arbitrary commands by specifying a malicious .dll using the Register.ID function,
- CVE-2000-0638bb-hostsvc.sh in Big Brother 1.4h1 and earlier allows remote attackers to read arbitrary files via a ..
- CVE-2000-0639The default configuration of Big Brother 1.4h2 and earlier does not include proper access restrictions, which allows remote attackers to exe
- CVE-2000-0640Guild FTPd allows remote attackers to determine the existence of files outside the FTP root via a ..
- CVE-2000-0641Savant web server allows remote attackers to execute arbitrary commands via a long GET request.
- CVE-2000-0642The default configuration of WebActive HTTP Server 1.00 stores the web access log active.log in the document root, which allows remote attac
- CVE-2000-0643Buffer overflow in WebActive HTTP Server 1.00 allows remote attackers to cause a denial of service via a long URL.
- CVE-2000-0644WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by executing a STAT command while the LIST command is still ex
- CVE-2000-0651The ClientTrust program in Novell BorderManager does not properly verify the origin of authentication requests, which could allow remote att
- CVE-2000-0652IBM WebSphere allows remote attackers to read source code for executable web files by directly calling the default InvokerServlet using a UR
- CVE-2000-0654Microsoft Enterprise Manager allows local users to obtain database passwords via the Data Transformation Service (DTS) package Registered Se
- CVE-2000-0655Netscape Communicator 4.73 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a JPEG image c
- CVE-2000-0660The WDaemon web server for WorldClient 2.1 allows remote attackers to read arbitrary files via a ..
- CVE-2000-0661WircSrv IRC Server 5.07s allows remote attackers to cause a denial of service via a long string to the server port.
- CVE-2000-0663The registry entry for the Windows Shell executable (Explorer.exe) in Windows NT and Windows 2000 uses a relative path name, which allows lo
- CVE-2000-0664AnalogX SimpleServer:WWW 1.06 and earlier allows remote attackers to read arbitrary files via a modified ..
- CVE-2000-0665GAMSoft TelSrv telnet server 1.5 and earlier allows remote attackers to cause a denial of service via a long username.
- CVE-2000-0666rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote at
- CVE-2000-0668pam_console PAM module in Linux systems allows a user to access the system console and reboot the system when a display manager such as gdm
- CVE-2000-0669Novell NetWare 5.0 allows remote attackers to cause a denial of service by flooding port 40193 with random data.
- CVE-2000-0670The cvsweb CGI script in CVSWeb 1.80 allows remote attackers with write access to a CVS repository to execute arbitrary commands via shell m
- CVE-2000-0671Roxen web server earlier than 2.0.69 allows allows remote attackers to bypass access restrictions, list directory contents, and read source
- CVE-2000-0673The NetBIOS Name Server (NBNS) protocol does not perform authentication, which allows remote attackers to cause a denial of service by sendi
- CVE-2000-0674ftp.pl CGI program for Virtual Visions FTP browser allows remote attackers to read directories outside of the document root via a ..
- CVE-2000-0675Buffer overflow in Infopulse Gatekeeper 3.5 and earlier allows remote attackers to execute arbitrary commands via a long string.
- CVE-2000-0676Netscape Communicator and Navigator 4.04 through 4.74 allows remote attackers to read arbitrary files by using a Java applet to open a conne
- CVE-2000-0677Buffer overflow in IBM Net.Data db2www CGI program allows remote attackers to execute arbitrary commands via a long PATH_INFO environmental
- CVE-2000-0678PGP 5.5.x through 6.5.3 does not properly check if an Additional Decryption Key (ADK) is stored in the signed portion of a public certificat
- CVE-2000-0681Buffer overflow in BEA WebLogic server proxy plugin allows remote attackers to execute arbitrary commands via a long URL with a .JSP extensi
- CVE-2000-0682BEA WebLogic 5.1.x allows remote attackers to read source code for parsed pages by inserting /ConsoleHelp/ into the URL, which invokes the F
- CVE-2000-0683BEA WebLogic 5.1.x allows remote attackers to read source code for parsed pages by inserting /*.shtml/ into the URL, which invokes the SSISe
- CVE-2000-0684BEA WebLogic 5.1.x does not properly restrict access to the JSPServlet, which could allow remote attackers to compile and execute Java JSP c
- CVE-2000-0685BEA WebLogic 5.1.x does not properly restrict access to the PageCompileServlet, which could allow remote attackers to compile and execute Ja
- CVE-2000-0700Cisco Gigabit Switch Routers (GSR) with Fast Ethernet / Gigabit Ethernet cards, from IOS versions 11.2(15)GS1A up to 11.2(19)GS0.2 and some
- CVE-2000-0703suidperl (aka sperl) does not properly cleanse the escape sequence "~!" before calling /bin/mail to send an error report, which allows local
- CVE-2000-0705ntop running in web mode allows remote attackers to read arbitrary files via a ..
- CVE-2000-0706Buffer overflows in ntop running in web mode allows remote attackers to execute arbitrary commands.
- CVE-2000-0707PCCS MySQLDatabase Admin Tool Manager 1.2.4 and earlier installs the file dbconnect.inc within the web root, which allows remote attackers t
- CVE-2000-0708Buffer overflow in Pragma Systems TelnetServer 2000 version 4.0 allows remote attackers to cause a denial of service via a long series of nu
- CVE-2000-0711Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which allows remote attacker
- CVE-2000-0712Linux Intrusion Detection System (LIDS) 0.9.7 allows local users to gain root privileges when LIDS is disabled via the security=0 boot optio
- CVE-2000-0718A race condition in MandrakeUpdate allows local users to modify RPM files while they are in the /tmp directory before they are installed.
- CVE-2000-0725Zope before 2.2.1 does not properly restrict access to the getRoles method, which allows users who can edit DTML to add or modify roles by mzope
- CVE-2000-0727xpdf PDF viewer client earlier than 0.91 does not properly launch a web browser for embedded URL's, which allows an attacker to execute arbi
- CVE-2000-0728xpdf PDF viewer client earlier than 0.91 allows local users to overwrite arbitrary files via a symlink attack.
- CVE-2000-0730Vulnerability in newgrp command in HP-UX 11.0 allows local users to gain privileges.
- CVE-2000-0733Telnetd telnet server in IRIX 5.2 through 6.1 does not properly cleans user-injected format strings, which allows remote attackers to execut
- CVE-2000-0737The Service Control Manager (SCM) in Windows 2000 creates predictable named pipes, which allows a local user with console access to gain adm
- CVE-2000-0743Buffer overflow in University of Minnesota (UMN) gopherd 2.x allows remote attackers to execute arbitrary commands via a DES key generation
- CVE-2000-0745admin.php3 in PHP-Nuke does not properly verify the PHP-Nuke administrator password, which allows remote attackers to gain privileges by req
- CVE-2000-0750Buffer overflow in mopd (Maintenance Operations Protocol loader daemon) allows remote attackers to execute arbitrary commands via a long fil
- CVE-2000-0751mopd (Maintenance Operations Protocol loader daemon) does not properly cleanse user-injected format strings, which allows remote attackers t
- CVE-2000-0754Vulnerability in HP OpenView Network Node Manager (NMM) version 6.1 related to passwords.
- CVE-2000-0758The web interface for Lyris List Manager 3 and 4 allows list subscribers to obtain administrative access by modifying the value of the list_
- CVE-2000-0761OS2/Warp 4.5 FTP server allows remote attackers to cause a denial of service via a long username.
- CVE-2000-0763xlockmore and xlockf do not properly cleanse user-injected format strings, which allows local users to gain root privileges via the -d optio
- CVE-2000-0765Buffer overflow in the HTML interpreter in Microsoft Office 2000 allows an attacker to execute arbitrary commands via a long embedded object
- CVE-2000-0767The ActiveX control for invoking a scriptlet in Internet Explorer 4.x and 5.x renders arbitrary file types instead of HTML, which allows an
- CVE-2000-0768A function in Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote at
- CVE-2000-0770IIS 4.0 and 5.0 does not properly restrict access to certain types of files when their parent folders have less restrictive permissions, whi
- CVE-2000-0771Microsoft Windows 2000 allows local users to cause a denial of service by corrupting the local security policy via malformed RPC traffic, ak
- CVE-2000-0777The password protection feature of Microsoft Money can store the password in plaintext, which allows attackers with physical access to the s
- CVE-2000-0778IIS 5.0 allows remote attackers to obtain source code for .ASP files and other scripts via an HTTP GET request with a "Translate: f" header,
- CVE-2000-0779Checkpoint Firewall-1 with the RSH/REXEC setting enabled allows remote attackers to bypass access restrictions and connect to a RSH/REXEC cl
- CVE-2000-0780The web server in IPSWITCH IMail 6.04 and earlier allows remote attackers to read and delete arbitrary files via a ..
- CVE-2000-0782netauth.cgi program in Netwin Netauth 4.2e and earlier allows remote attackers to read arbitrary files via a ..
- CVE-2000-0786GNU userv 1.0.0 and earlier does not properly perform file descriptor swapping, which can corrupt the USERV_GROUPS and USERV_GIDS environmen
- CVE-2000-0787IRC Xchat client versions 1.4.2 and earlier allows remote attackers to execute arbitrary commands by encoding shell metacharacters into a UR
- CVE-2000-0792Gnome Lokkit firewall package before 0.41 does not properly restrict access to some ports, even if a user does not make any services availab