# CVEs published 2000-10-13

261 CVEs were published on October 13, 2000: 0 critical, 0 high. Days are UTC.

- [CVE-1999-0145](https://cve.now/CVE-1999-0145.md): Sendmail WIZ command enabled, allowing root access. (no CVSS)
- [CVE-1999-0247](https://cve.now/CVE-1999-0247.md): Buffer overflow in nnrpd program in INN up to version 1.6 allows remote users to execute arbitrary commands. (no CVSS)
- [CVE-1999-0248](https://cve.now/CVE-1999-0248.md): A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credentials. (no CVSS)
- [CVE-1999-0358](https://cve.now/CVE-1999-0358.md): Digital Unix 4.0 has a buffer overflow in the inc program of the mh package. (no CVSS)
- [CVE-1999-0393](https://cve.now/CVE-1999-0393.md): Remote attackers can cause a denial of service in Sendmail 8.8.x and 8.9.2 by sending messages with a large number of headers. (no CVSS)
- [CVE-1999-0395](https://cve.now/CVE-1999-0395.md): A race condition in the BackWeb Polite Agent Protocol allows an attacker to spoof a BackWeb server. (no CVSS)
- [CVE-1999-0403](https://cve.now/CVE-1999-0403.md): A bug in Cyrix CPUs on Linux allows local users to perform a denial of service. (no CVSS)
- [CVE-1999-0429](https://cve.now/CVE-1999-0429.md): The Lotus Notes 4.5 client may send a copy of encrypted mail in the clear across the network if the user does not set the "Encrypt Saved Mai (no CVSS)
- [CVE-1999-0440](https://cve.now/CVE-1999-0440.md): The byte code verifier component of the Java Virtual Machine (JVM) allows remote execution through malicious web pages. (no CVSS)
- [CVE-1999-0671](https://cve.now/CVE-1999-0671.md): Buffer overflow in ToxSoft NextFTP client through CWD command. (no CVSS)
- [CVE-1999-0672](https://cve.now/CVE-1999-0672.md): Buffer overflow in Fujitsu Chocoa IRC client via IRC channel topics. (no CVSS)
- [CVE-1999-0675](https://cve.now/CVE-1999-0675.md): Check Point FireWall-1 can be subjected to a denial of service via UDP packets that are sent through VPN-1 to port 0 of a host. (no CVSS)
- [CVE-1999-0679](https://cve.now/CVE-1999-0679.md): Buffer overflow in hybrid-6 IRC server commonly used on EFnet allows remote attackers to execute commands via m\_invite invite option. (no CVSS)
- [CVE-1999-0697](https://cve.now/CVE-1999-0697.md): SCO Doctor allows local users to gain root privileges through a Tools option. (no CVSS)
- [CVE-1999-0759](https://cve.now/CVE-1999-0759.md): Buffer overflow in FuseMAIL POP service via long USER and PASS commands. (no CVSS)
- [CVE-1999-0787](https://cve.now/CVE-1999-0787.md): The SSH authentication agent follows symlinks via a UNIX domain socket. (no CVSS)
- [CVE-1999-0788](https://cve.now/CVE-1999-0788.md): Arkiea nlservd allows remote attackers to conduct a denial of service. (no CVSS)
- [CVE-1999-0791](https://cve.now/CVE-1999-0791.md): Hybrid Network cable modems do not include an authentication mechanism for administration, allowing remote attackers to compromise the syste (no CVSS)
- [CVE-1999-0823](https://cve.now/CVE-1999-0823.md): Buffer overflow in FreeBSD xmindpath allows local users to gain privileges via -f argument. (no CVSS)
- [CVE-1999-0826](https://cve.now/CVE-1999-0826.md): Buffer overflow in FreeBSD angband allows local users to gain privileges. (no CVSS)
- [CVE-1999-0873](https://cve.now/CVE-1999-0873.md): Buffer overflow in Skyfull mail server via MAIL FROM command. (no CVSS)
- [CVE-1999-0904](https://cve.now/CVE-1999-0904.md): Buffer overflow in BFTelnet allows remote attackers to cause a denial of service via a long username. (no CVSS)
- [CVE-1999-0912](https://cve.now/CVE-1999-0912.md): FreeBSD VFS cache (vfs\_cache) allows local users to cause a denial of service by opening a large number of files. (no CVSS)
- [CVE-1999-0927](https://cve.now/CVE-1999-0927.md): NTMail allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-1999-0928](https://cve.now/CVE-1999-0928.md): Buffer overflow in SmartDesk WebSuite allows remote attackers to cause a denial of service via a long URL. (no CVSS)
- [CVE-1999-0932](https://cve.now/CVE-1999-0932.md): Mediahouse Statistics Server allows remote attackers to read the administrator password, which is stored in cleartext in the ss.cfg file. (no CVSS)
- [CVE-1999-0942](https://cve.now/CVE-1999-0942.md): UnixWare dos7utils allows a local user to gain root privileges by using the STATICMERGE environmental variable to find a script which it exe (no CVSS)
- [CVE-1999-0946](https://cve.now/CVE-1999-0946.md): Buffer overflow in Yamaha MidiPlug via a Text variable in an EMBED tag. (no CVSS)
- [CVE-1999-0954](https://cve.now/CVE-1999-0954.md): WWWBoard has a default username and default password. (no CVSS)
- [CVE-1999-0971](https://cve.now/CVE-1999-0971.md): Buffer overflow in Exim allows local users to gain root privileges via a long :include: option in a .forward file. (no CVSS)
- [CVE-1999-1004](https://cve.now/CVE-1999-1004.md): Buffer overflow in the POP server POProxy for the Norton Anti-Virus protection NAV2000 program via a large USER command. (no CVSS)
- [CVE-2000-0002](https://cve.now/CVE-2000-0002.md): Buffer overflow in ZBServer Pro 1.50 allows remote attackers to execute commands via a long GET request. (no CVSS)
- [CVE-2000-0009](https://cve.now/CVE-2000-0009.md): The bna\_pass program in Optivity NETarchitect uses the PATH environmental variable for finding the "rm" program, which allows local users to (no CVSS)
- [CVE-2000-0056](https://cve.now/CVE-2000-0056.md): IMail IMONITOR status.cgi CGI script allows remote attackers to cause a denial of service with many calls to status.cgi. (no CVSS)
- [CVE-2000-0063](https://cve.now/CVE-2000-0063.md): cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to read arbitrary files by specifying the filename in a parameter (no CVSS)
- [CVE-2000-0064](https://cve.now/CVE-2000-0064.md): cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to cause a denial of service via a malformed URL that includes sh (no CVSS)
- [CVE-2000-0065](https://cve.now/CVE-2000-0065.md): Buffer overflow in InetServ 3.0 allows remote attackers to execute commands via a long GET request. (no CVSS)
- [CVE-2000-0075](https://cve.now/CVE-2000-0075.md): Super Mail Transfer Package (SMTP), later called MsgCore, has a memory leak which allows remote attackers to cause a denial of service by re (no CVSS)
- [CVE-2000-0076](https://cve.now/CVE-2000-0076.md): nviboot boot script in the Debian nvi package allows local users to delete files via malformed entries in vi.recover. (no CVSS)
- [CVE-2000-0090](https://cve.now/CVE-2000-0090.md): VMWare 1.1.2 allows local users to cause a denial of service via a symlink attack. (no CVSS)
- [CVE-2000-0094](https://cve.now/CVE-2000-0094.md): procfs in BSD systems allows local users to gain root privileges by modifying the /proc/pid/mem interface via a modified file descriptor for (no CVSS)
- [CVE-2000-0116](https://cve.now/CVE-2000-0116.md): Firewall-1 does not properly filter script tags, which allows remote attackers to bypass the "Strip Script Tags" restriction by including an (no CVSS)
- [CVE-2000-0117](https://cve.now/CVE-2000-0117.md): The siteUserMod.cgi program in Cobalt RaQ2 servers allows any Site Administrator to modify passwords for other users, site administrators, a (no CVSS)
- [CVE-2000-0127](https://cve.now/CVE-2000-0127.md): The Webspeed configuration program does not properly disable access to the WSMadmin utility, which allows remote attackers to gain privilege (no CVSS)
- [CVE-2000-0128](https://cve.now/CVE-2000-0128.md): The Finger Server 0.82 allows remote attackers to execute commands via shell metacharacters. (no CVSS)
- [CVE-2000-0130](https://cve.now/CVE-2000-0130.md): Buffer overflow in SCO scohelp program allows remote attackers to execute commands. (no CVSS)
- [CVE-2000-0141](https://cve.now/CVE-2000-0141.md): Infopop Ultimate Bulletin Board (UBB) allows remote attackers to execute commands via shell metacharacters in the topic hidden field. (no CVSS)
- [CVE-2000-0146](https://cve.now/CVE-2000-0146.md): The Java Server in the Novell GroupWise Web Access Enhancement Pack allows remote attackers to cause a denial of service via a long URL to t (no CVSS)
- [CVE-2000-0164](https://cve.now/CVE-2000-0164.md): The installation of Sun Internet Mail Server (SIMS) creates a world-readable file that allows local users to obtain passwords. (no CVSS)
- [CVE-2000-0166](https://cve.now/CVE-2000-0166.md): Buffer overflow in the InterAccess telnet server TelnetD allows remote attackers to execute commands via a long login name. (no CVSS)
- [CVE-2000-0179](https://cve.now/CVE-2000-0179.md): HP OpenView OmniBack 2.55 allows remote attackers to cause a denial of service via a large number of connections to port 5555. (no CVSS)
- [CVE-2000-0191](https://cve.now/CVE-2000-0191.md): Axis StorPoint CD allows remote attackers to access administrator URLs without authentication via a .. (no CVSS)
- [CVE-2000-0193](https://cve.now/CVE-2000-0193.md): The default configuration of Dosemu in Corel Linux 1.0 allows local users to execute the system.com program and gain privileges. (no CVSS)
- [CVE-2000-0225](https://cve.now/CVE-2000-0225.md): The Pocsag POC32 program does not properly prevent remote users from accessing its server port, even if the option has been disabled. (no CVSS)
- [CVE-2000-0237](https://cve.now/CVE-2000-0237.md): Netscape Enterprise Server with Web Publishing enabled allows remote attackers to list arbitrary directories via a GET request for the /publ (no CVSS)
- [CVE-2000-0238](https://cve.now/CVE-2000-0238.md): Buffer overflow in the web server for Norton AntiVirus for Internet Email Gateways allows remote attackers to cause a denial of service via (no CVSS)
- [CVE-2000-0240](https://cve.now/CVE-2000-0240.md): vqSoft vqServer program allows remote attackers to read arbitrary files via a /........../ in the URL, a variation of a .. (no CVSS)
- [CVE-2000-0257](https://cve.now/CVE-2000-0257.md): Buffer overflow in the NetWare remote web administration utility allows remote attackers to cause a denial of service or execute commands vi (no CVSS)
- [CVE-2000-0263](https://cve.now/CVE-2000-0263.md): The X font server xfs in Red Hat Linux 6.x allows an attacker to cause a denial of service via a malformed request. (no CVSS)
- [CVE-2000-0265](https://cve.now/CVE-2000-0265.md): Panda Security 3.0 allows users to uninstall the Panda software via its Add/Remove Programs applet. (no CVSS)
- [CVE-2000-0272](https://cve.now/CVE-2000-0272.md): RealNetworks RealServer allows remote attackers to cause a denial of service by sending malformed input to the server at port 7070. (no CVSS)
- [CVE-2000-0273](https://cve.now/CVE-2000-0273.md): PCAnywhere allows remote attackers to cause a denial of service by terminating the connection before PCAnywhere provides a login prompt. (no CVSS)
- [CVE-2000-0282](https://cve.now/CVE-2000-0282.md): TalentSoft webpsvr daemon in the Web+ shopping cart application allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2000-0285](https://cve.now/CVE-2000-0285.md): Buffer overflow in XFree86 3.3.x allows local users to execute arbitrary commands via a long -xkbmap parameter. (no CVSS)
- [CVE-2000-0289](https://cve.now/CVE-2000-0289.md): IP masquerading in Linux 2.2.x allows remote attackers to route UDP packets through the internal interface by modifying the external source (no CVSS)
- [CVE-2000-0301](https://cve.now/CVE-2000-0301.md): Ipswitch IMAIL server 6.02 and earlier allows remote attackers to cause a denial of service via the AUTH CRAM-MD5 command. (no CVSS)
- [CVE-2000-0318](https://cve.now/CVE-2000-0318.md): Atrium Mercur Mail Server 3.2 allows local attackers to read other user's email and create arbitrary files via a dot dot (..) attack. (no CVSS)
- [CVE-2000-0319](https://cve.now/CVE-2000-0319.md): mail.local in Sendmail 8.10.x does not properly identify the .\\n string which identifies the end of message text, which allows a remote atta (no CVSS)
- [CVE-2000-0320](https://cve.now/CVE-2000-0320.md): Qpopper 2.53 and 3.0 does not properly identify the \\n string which identifies the end of message text, which allows a remote attacker to ca (no CVSS)
- [CVE-2000-0322](https://cve.now/CVE-2000-0322.md): The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metachar (no CVSS)
- [CVE-2000-0332](https://cve.now/CVE-2000-0332.md): UltraBoard.pl or UltraBoard.cgi CGI scripts in UltraBoard 1.6 allows remote attackers to read arbitrary files via a pathname string that inc (no CVSS)
- [CVE-2000-0335](https://cve.now/CVE-2000-0335.md): The resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS query results. (no CVSS)
- [CVE-2000-0338](https://cve.now/CVE-2000-0338.md): Concurrent Versions Software (CVS) uses predictable temporary file names for locking, which allows local users to cause a denial of service (no CVSS)
- [CVE-2000-0340](https://cve.now/CVE-2000-0340.md): Buffer overflow in Gnomelib in SuSE Linux 6.3 allows local users to execute arbitrary commands via the DISPLAY environmental variable. (no CVSS)
- [CVE-2000-0344](https://cve.now/CVE-2000-0344.md): The knfsd NFS server in Linux kernel 2.2.x allows remote attackers to cause a denial of service via a negative size value. (no CVSS)
- [CVE-2000-0347](https://cve.now/CVE-2000-0347.md): Windows 95 and Windows 98 allow a remote attacker to cause a denial of service via a NetBIOS session request packet with a NULL source name. (no CVSS)
- [CVE-2000-0366](https://cve.now/CVE-2000-0366.md): dump in Debian GNU/Linux 2.1 does not properly restore symlinks, which allows a local user to modify the ownership of arbitrary files. (no CVSS)
- [CVE-2000-0369](https://cve.now/CVE-2000-0369.md): The IDENT server in Caldera Linux 2.3 creates multiple threads for each IDENT request, which allows remote attackers to cause a denial of se (no CVSS)
- [CVE-2000-0374](https://cve.now/CVE-2000-0374.md): The default configuration of kdm in Caldera and Mandrake Linux, and possibly other distributions, allows XDMCP connections from any host, wh (no CVSS)
- [CVE-2000-0378](https://cve.now/CVE-2000-0378.md): The pam\_console PAM module in Linux systems performs a chown on various devices upon a user login, but an open file descriptor for those dev (no CVSS)
- [CVE-2000-0426](https://cve.now/CVE-2000-0426.md): UltraBoard 1.6 and other versions allow remote attackers to cause a denial of service by referencing UltraBoard in the Session parameter, wh (no CVSS)
- [CVE-2000-0430](https://cve.now/CVE-2000-0430.md): Cart32 allows remote attackers to access sensitive debugging information by appending /expdate to the URL request. (no CVSS)
- [CVE-2000-0440](https://cve.now/CVE-2000-0440.md): NetBSD 1.4.2 and earlier allows remote attackers to cause a denial of service by sending a packet with an unaligned IP timestamp option. (no CVSS)
- [CVE-2000-0443](https://cve.now/CVE-2000-0443.md): The web interface server in HP Web JetAdmin 5.6 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2000-0445](https://cve.now/CVE-2000-0445.md): The pgpk command in PGP 5.x on Unix systems uses an insufficiently random data source for non-interactive key pair generation, which may pro (no CVSS)
- [CVE-2000-0446](https://cve.now/CVE-2000-0446.md): Buffer overflow in MDBMS database server allows remote attackers to execute arbitrary commands via a long string. (no CVSS)
- [CVE-2000-0447](https://cve.now/CVE-2000-0447.md): Buffer overflow in WebShield SMTP 4.5.44 allows remote attackers to execute arbitrary commands via a long configuration parameter to the Web (no CVSS)
- [CVE-2000-0448](https://cve.now/CVE-2000-0448.md): The WebShield SMTP Management Tool version 4.5.44 does not properly restrict access to the management port when an IP address does not resol (no CVSS)
- [CVE-2000-0451](https://cve.now/CVE-2000-0451.md): The Intel express 8100 ISDN router allows remote attackers to cause a denial of service via oversized or fragmented ICMP packets. (no CVSS)
- [CVE-2000-0458](https://cve.now/CVE-2000-0458.md): The MSWordView application in IMP creates world-readable files in the /tmp directory, which allows other local users to read potentially sen (no CVSS)
- [CVE-2000-0459](https://cve.now/CVE-2000-0459.md): IMP does not remove files properly if the MSWordView application quits, which allows local users to cause a denial of service by filling up (no CVSS)
- [CVE-2000-0466](https://cve.now/CVE-2000-0466.md): AIX cdmount allows local users to gain root privileges via shell metacharacters. (no CVSS)
- [CVE-2000-0467](https://cve.now/CVE-2000-0467.md): Buffer overflow in Linux splitvt 1.6.3 and earlier allows local users to gain root privileges via a long password in the screen locking func (no CVSS)
- [CVE-2000-0468](https://cve.now/CVE-2000-0468.md): man in HP-UX 10.20 and 11 allows local attackers to overwrite files via a symlink attack. (no CVSS)
- [CVE-2000-0469](https://cve.now/CVE-2000-0469.md): Selena Sol WebBanner 4.0 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2000-0470](https://cve.now/CVE-2000-0470.md): Allegro RomPager HTTP server allows remote attackers to cause a denial of service via a malformed authentication request. (no CVSS)
- [CVE-2000-0471](https://cve.now/CVE-2000-0471.md): Buffer overflow in ufsrestore in Solaris 8 and earlier allows local users to gain root privileges via a long pathname. (no CVSS)
- [CVE-2000-0472](https://cve.now/CVE-2000-0472.md): Buffer overflow in innd 2.2.2 allows remote attackers to execute arbitrary commands via a cancel request containing a long message ID. (no CVSS)
- [CVE-2000-0474](https://cve.now/CVE-2000-0474.md): Real Networks RealServer 7.x allows remote attackers to cause a denial of service via a malformed request for a page in the viewsource direc (no CVSS)
- [CVE-2000-0475](https://cve.now/CVE-2000-0475.md): Windows 2000 allows a local user process to access another user's desktop within the same windows station, aka the "Desktop Separation" vuln (no CVSS)
- [CVE-2000-0477](https://cve.now/CVE-2000-0477.md): Buffer overflow in Norton Antivirus for Exchange (NavExchange) allows remote attackers to cause a denial of service via a .zip file that con (no CVSS)
- [CVE-2000-0478](https://cve.now/CVE-2000-0478.md): In some cases, Norton Antivirus for Exchange (NavExchange) enters a "fail-open" state which allows viruses to pass through the server. (no CVSS)
- [CVE-2000-0481](https://cve.now/CVE-2000-0481.md): Buffer overflow in KDE Kmail allows a remote attacker to cause a denial of service via an attachment with a long file name. (no CVSS)
- [CVE-2000-0482](https://cve.now/CVE-2000-0482.md): Check Point Firewall-1 allows remote attackers to cause a denial of service by sending a large number of malformed fragmented IP packets. (no CVSS)
- [CVE-2000-0483](https://cve.now/CVE-2000-0483.md): The DocumentTemplate package in Zope 2.2 and earlier allows a remote attacker to modify DTMLDocuments or DTMLMethods without authorization. (no CVSS, zope)
- [CVE-2000-0484](https://cve.now/CVE-2000-0484.md): Small HTTP Server ver 3.06 contains a memory corruption bug causing a memory overflow. (no CVSS)
- [CVE-2000-0485](https://cve.now/CVE-2000-0485.md): Microsoft SQL Server allows local users to obtain database passwords via the Data Transformation Service (DTS) package Properties dialog, ak (no CVSS)
- [CVE-2000-0486](https://cve.now/CVE-2000-0486.md): Buffer overflow in Cisco TACACS+ tac\_plus server allows remote attackers to cause a denial of service via a malformed packet with a long len (no CVSS)
- [CVE-2000-0489](https://cve.now/CVE-2000-0489.md): FreeBSD, NetBSD, and OpenBSD allow an attacker to cause a denial of service by creating a large number of socket pairs using the socketpair (no CVSS)
- [CVE-2000-0490](https://cve.now/CVE-2000-0490.md): Buffer overflow in the NetWin DSMTP 2.7q in the NetWin dmail package allows remote attackers to execute arbitrary commands via a long ETRN r (no CVSS)
- [CVE-2000-0493](https://cve.now/CVE-2000-0493.md): Buffer overflow in Simple Network Time Sync (SMTS) daemon allows remote attackers to cause a denial of service and possibly execute arbitrar (no CVSS)
- [CVE-2000-0494](https://cve.now/CVE-2000-0494.md): Veritas Volume Manager creates a world writable .server\_pids file, which allows local users to add arbitrary commands into the file, which i (no CVSS)
- [CVE-2000-0495](https://cve.now/CVE-2000-0495.md): Microsoft Windows Media Encoder allows remote attackers to cause a denial of service via a malformed request, aka the "Malformed Windows Med (no CVSS)
- [CVE-2000-0497](https://cve.now/CVE-2000-0497.md): IBM WebSphere server 3.0.2 allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extensio (no CVSS)
- [CVE-2000-0499](https://cve.now/CVE-2000-0499.md): The default configuration of BEA WebLogic 3.1.8 through 4.5.1 allows a remote attacker to view source code of a JSP program by requesting a (no CVSS)
- [CVE-2000-0500](https://cve.now/CVE-2000-0500.md): The default configuration of BEA WebLogic 5.1.0 allows a remote attacker to view source code of programs by requesting a URL beginning with (no CVSS)
- [CVE-2000-0501](https://cve.now/CVE-2000-0501.md): Race condition in MDaemon 2.8.5.0 POP server allows local users to cause a denial of service by entering a UIDL command and quickly exiting (no CVSS)
- [CVE-2000-0505](https://cve.now/CVE-2000-0505.md): The Apache 1.3.x HTTP server for Windows platforms allows remote attackers to list directory contents by requesting a URL containing a large (no CVSS)
- [CVE-2000-0506](https://cve.now/CVE-2000-0506.md): The "capabilities" feature in Linux before 2.2.16 allows local users to cause a denial of service or gain privileges by setting the capabili (no CVSS)
- [CVE-2000-0507](https://cve.now/CVE-2000-0507.md): Imate Webmail Server 2.5 allows remote attackers to cause a denial of service via a long HELO command. (no CVSS)
- [CVE-2000-0508](https://cve.now/CVE-2000-0508.md): rpc.lockd in Red Hat Linux 6.1 and 6.2 allows remote attackers to cause a denial of service via a malformed request. (no CVSS)
- [CVE-2000-0510](https://cve.now/CVE-2000-0510.md): CUPS (Common Unix Printing System) 1.04 and earlier allows remote attackers to cause a denial of service via a malformed IPP request. (no CVSS)
- [CVE-2000-0511](https://cve.now/CVE-2000-0511.md): CUPS (Common Unix Printing System) 1.04 and earlier allows remote attackers to cause a denial of service via a CGI POST request. (no CVSS)
- [CVE-2000-0512](https://cve.now/CVE-2000-0512.md): CUPS (Common Unix Printing System) 1.04 and earlier does not properly delete request files, which allows a remote attacker to cause a denial (no CVSS)
- [CVE-2000-0513](https://cve.now/CVE-2000-0513.md): CUPS (Common Unix Printing System) 1.04 and earlier allows remote attackers to cause a denial of service by authenticating with a user name (no CVSS)
- [CVE-2000-0514](https://cve.now/CVE-2000-0514.md): GSSFTP FTP daemon in Kerberos 5 1.1.x does not properly restrict access to some FTP commands, which allows remote attackers to cause a denia (no CVSS)
- [CVE-2000-0515](https://cve.now/CVE-2000-0515.md): The snmpd.conf configuration file for the SNMP daemon (snmpd) in HP-UX 11.0 is world writable, which allows local users to modify SNMP confi (no CVSS)
- [CVE-2000-0516](https://cve.now/CVE-2000-0516.md): When configured to store configuration information in an LDAP directory, Shiva Access Manager 5.0.0 stores the root DN (Distinguished Name) (no CVSS)
- [CVE-2000-0517](https://cve.now/CVE-2000-0517.md): Netscape 4.73 and earlier does not properly warn users about a potentially invalid certificate if the user has previously accepted the certi (no CVSS)
- [CVE-2000-0518](https://cve.now/CVE-2000-0518.md): Internet Explorer 4.x and 5.x does not properly verify all contents of an SSL certificate if a connection is made to the server via an image (no CVSS)
- [CVE-2000-0519](https://cve.now/CVE-2000-0519.md): Internet Explorer 4.x and 5.x does not properly re-validate an SSL certificate if the user establishes a new SSL session with the same serve (no CVSS)
- [CVE-2000-0521](https://cve.now/CVE-2000-0521.md): Savant web server allows remote attackers to read source code of CGI scripts via a GET request that does not include the HTTP version number (no CVSS)
- [CVE-2000-0522](https://cve.now/CVE-2000-0522.md): RSA ACE/Server allows remote attackers to cause a denial of service by flooding the server's authentication request port with UDP packets, w (no CVSS)
- [CVE-2000-0525](https://cve.now/CVE-2000-0525.md): OpenSSH does not properly drop privileges when the UseLogin option is enabled, which allows local users to execute arbitrary commands by pro (no CVSS)
- [CVE-2000-0528](https://cve.now/CVE-2000-0528.md): Net Tools PKI Server does not properly restrict access to remote attackers when the XUDA template files do not contain absolute pathnames fo (no CVSS)
- [CVE-2000-0529](https://cve.now/CVE-2000-0529.md): Net Tools PKI Server allows remote attackers to cause a denial of service via a long HTTP request. (no CVSS)
- [CVE-2000-0530](https://cve.now/CVE-2000-0530.md): The KApplication class in the KDE 1.1.2 configuration file management capability allows local users to overwrite arbitrary files. (no CVSS)
- [CVE-2000-0532](https://cve.now/CVE-2000-0532.md): A FreeBSD patch for SSH on 2000-01-14 configures ssh to listen on port 722 as well as port 22, which might allow remote attackers to access (no CVSS)
- [CVE-2000-0533](https://cve.now/CVE-2000-0533.md): Vulnerability in cvconnect in SGI IRIX WorkShop allows local users to overwrite arbitrary files. (no CVSS)
- [CVE-2000-0534](https://cve.now/CVE-2000-0534.md): The apsfilter software in the FreeBSD ports package does not properly read user filter configurations, which allows local users to execute c (no CVSS)
- [CVE-2000-0536](https://cve.now/CVE-2000-0536.md): xinetd 2.1.8.x does not properly restrict connections if hostnames are used for access control and the connecting host does not have a rever (no CVSS)
- [CVE-2000-0537](https://cve.now/CVE-2000-0537.md): BRU backup software allows local users to append data to arbitrary files by specifying an alternate configuration file with the BRUEXECLOG e (no CVSS)
- [CVE-2000-0538](https://cve.now/CVE-2000-0538.md): ColdFusion Administrator for ColdFusion 4.5.1 and earlier allows remote attackers to cause a denial of service via a long login password. (no CVSS)
- [CVE-2000-0539](https://cve.now/CVE-2000-0539.md): Servlet examples in Allaire JRun 2.3.x allow remote attackers to obtain sensitive information, e.g. (no CVSS)
- [CVE-2000-0540](https://cve.now/CVE-2000-0540.md): JSP sample files in Allaire JRun 2.3.x allow remote attackers to access arbitrary files (e.g. (no CVSS)
- [CVE-2000-0548](https://cve.now/CVE-2000-0548.md): Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the e\_msg variable in the kerb\_err\_reply (no CVSS)
- [CVE-2000-0549](https://cve.now/CVE-2000-0549.md): Kerberos 4 KDC program does not properly check for null termination of AUTH\_MSG\_KDC\_REQUEST requests, which allows remote attackers to cause (no CVSS)
- [CVE-2000-0550](https://cve.now/CVE-2000-0550.md): Kerberos 4 KDC program improperly frees memory twice (aka "double-free"), which allows remote attackers to cause a denial of service. (no CVSS)
- [CVE-2000-0552](https://cve.now/CVE-2000-0552.md): ICQwebmail client for ICQ 2000A creates a world readable temporary file during login and does not delete it, which allows local users to obt (no CVSS)
- [CVE-2000-0553](https://cve.now/CVE-2000-0553.md): Race condition in IPFilter firewall 3.4.3 and earlier, when configured with overlapping "return-rst" and "keep state" rules, allows remote a (no CVSS)
- [CVE-2000-0555](https://cve.now/CVE-2000-0555.md): Ceilidh allows remote attackers to cause a denial of service via a large number of POST requests. (no CVSS)
- [CVE-2000-0556](https://cve.now/CVE-2000-0556.md): Buffer overflow in the web interface for Cmail 2.4.7 allows remote attackers to cause a denial of service by sending a large user name to th (no CVSS)
- [CVE-2000-0557](https://cve.now/CVE-2000-0557.md): Buffer overflow in the web interface for Cmail 2.4.7 allows remote attackers to execute arbitrary commands via a long GET request. (no CVSS)
- [CVE-2000-0558](https://cve.now/CVE-2000-0558.md): Buffer overflow in HP Openview Network Node Manager 6.1 allows remote attackers to execute arbitrary commands via the Alarm service (OVALARM (no CVSS)
- [CVE-2000-0561](https://cve.now/CVE-2000-0561.md): Buffer overflow in WebBBS 1.15 allows remote attackers to execute arbitrary commands via a long HTTP GET request. (no CVSS)
- [CVE-2000-0566](https://cve.now/CVE-2000-0566.md): makewhatis in Linux man package allows local users to overwrite files via a symlink attack. (no CVSS)
- [CVE-2000-0567](https://cve.now/CVE-2000-0567.md): Buffer overflow in Microsoft Outlook and Outlook Express allows remote attackers to execute arbitrary commands via a long Date field in an e (no CVSS)
- [CVE-2000-0571](https://cve.now/CVE-2000-0571.md): LocalWEB HTTP server 1.2.0 allows remote attackers to cause a denial of service via a long GET request. (no CVSS)
- [CVE-2000-0579](https://cve.now/CVE-2000-0579.md): IRIX crontab creates temporary files with predictable file names and with the umask of the user, which could allow local users to modify ano (no CVSS)
- [CVE-2000-0582](https://cve.now/CVE-2000-0582.md): Check Point FireWall-1 4.0 and 4.1 allows remote attackers to cause a denial of service by sending a stream of invalid commands (such as bin (no CVSS)
- [CVE-2000-0583](https://cve.now/CVE-2000-0583.md): vchkpw program in vpopmail before version 4.8 does not properly cleanse an untrusted format string used in a call to syslog, which allows re (no CVSS)
- [CVE-2000-0584](https://cve.now/CVE-2000-0584.md): Buffer overflow in Canna input system allows remote attackers to execute arbitrary commands via an SR\_INIT command with a long user name or (no CVSS)
- [CVE-2000-0585](https://cve.now/CVE-2000-0585.md): ISC DHCP client program dhclient allows remote attackers to execute arbitrary commands via shell metacharacters. (no CVSS)
- [CVE-2000-0586](https://cve.now/CVE-2000-0586.md): Buffer overflow in Dalnet IRC server 4.6.5 allows remote attackers to cause a denial of service or execute arbitrary commands via the SUMMON (no CVSS)
- [CVE-2000-0587](https://cve.now/CVE-2000-0587.md): The privpath directive in glftpd 1.18 allows remote attackers to bypass access restrictions for directories by using the file name completio (no CVSS)
- [CVE-2000-0588](https://cve.now/CVE-2000-0588.md): SawMill 5.0.21 CGI program allows remote attackers to read the first line of arbitrary files by listing the file in the rfcf parameter, whos (no CVSS)
- [CVE-2000-0591](https://cve.now/CVE-2000-0591.md): Novell BorderManager 3.0 and 3.5 allows remote attackers to bypass URL filtering by encoding characters in the requested URL. (no CVSS)
- [CVE-2000-0594](https://cve.now/CVE-2000-0594.md): BitchX IRC client does not properly cleanse an untrusted format string, which allows remote attackers to cause a denial of service via an in (no CVSS)
- [CVE-2000-0595](https://cve.now/CVE-2000-0595.md): libedit searches for the .editrc file in the current directory instead of the user's home directory, which may allow local users to execute (no CVSS)
- [CVE-2000-0596](https://cve.now/CVE-2000-0596.md): Internet Explorer 5.x does not warn a user before opening a Microsoft Access database file that is referenced within ActiveX OBJECT tags in (no CVSS)
- [CVE-2000-0597](https://cve.now/CVE-2000-0597.md): Microsoft Office 2000 (Excel and PowerPoint) and PowerPoint 97 are marked as safe for scripting, which allows remote attackers to force Inte (no CVSS)
- [CVE-2000-0598](https://cve.now/CVE-2000-0598.md): Fortech Proxy+ allows remote attackers to bypass access restrictions for to the administration service by redirecting their connections thro (no CVSS)
- [CVE-2000-0599](https://cve.now/CVE-2000-0599.md): Buffer overflow in iMesh 1.02 allows remote attackers to execute arbitrary commands via a long string to the iMesh port. (no CVSS)
- [CVE-2000-0601](https://cve.now/CVE-2000-0601.md): LeafChat 1.7 IRC client allows a remote IRC server to cause a denial of service by rapidly sending a large amount of error messages. (no CVSS)
- [CVE-2000-0602](https://cve.now/CVE-2000-0602.md): Secure Locate (slocate) in Red Hat Linux allows local users to gain privileges via a malformed configuration file that is specified in the L (no CVSS)
- [CVE-2000-0603](https://cve.now/CVE-2000-0603.md): Microsoft SQL Server 7.0 allows a local user to bypass permissions for stored procedures by referencing them via a temporary stored procedur (no CVSS)
- [CVE-2000-0604](https://cve.now/CVE-2000-0604.md): gkermit in Red Hat Linux is improperly installed with setgid uucp, which allows local users to modify files owned by uucp. (no CVSS)
- [CVE-2000-0610](https://cve.now/CVE-2000-0610.md): NetWin dMailWeb and cwMail 2.6g and earlier allows remote attackers to bypass authentication and use the server for mail relay via a usernam (no CVSS)
- [CVE-2000-0611](https://cve.now/CVE-2000-0611.md): The default configuration of NetWin dMailWeb and cwMail trusts all POP servers, which allows attackers to bypass normal authentication and c (no CVSS)
- [CVE-2000-0613](https://cve.now/CVE-2000-0613.md): Cisco Secure PIX Firewall does not properly identify forged TCP Reset (RST) packets, which allows remote attackers to force the firewall to (no CVSS)
- [CVE-2000-0616](https://cve.now/CVE-2000-0616.md): Vulnerability in HP TurboIMAGE DBUTIL allows local users to gain additional privileges via DBUTIL.PUB.SYS. (no CVSS)
- [CVE-2000-0621](https://cve.now/CVE-2000-0621.md): Microsoft Outlook 98 and 2000, and Outlook Express 4.0x and 5.0x, allow remote attackers to read files on the client's system via a malforme (no CVSS)
- [CVE-2000-0624](https://cve.now/CVE-2000-0624.md): Buffer overflow in Winamp 2.64 and earlier allows remote attackers to execute arbitrary commands via a long #EXTINF: extension in the M3U pl (no CVSS)
- [CVE-2000-0627](https://cve.now/CVE-2000-0627.md): BlackBoard CourseInfo 4.0 does not properly authenticate users, which allows local users to modify CourseInfo database information and gain (no CVSS)
- [CVE-2000-0628](https://cve.now/CVE-2000-0628.md): The source.asp example script in the Apache ASP module Apache::ASP 1.93 and earlier allows remote attackers to modify files. (no CVSS)
- [CVE-2000-0630](https://cve.now/CVE-2000-0630.md): IIS 4.0 and 5.0 allows remote attackers to obtain fragments of source code by appending a +.htr to the URL, a variant of the "File Fragment (no CVSS)
- [CVE-2000-0631](https://cve.now/CVE-2000-0631.md): An administrative script from IIS 3.0, later included in IIS 4.0 and 5.0, allows remote attackers to cause a denial of service by accessing (no CVSS)
- [CVE-2000-0632](https://cve.now/CVE-2000-0632.md): Buffer overflow in the web archive component of L-Soft Listserv 1.8d and earlier allows remote attackers to execute arbitrary commands via a (no CVSS)
- [CVE-2000-0633](https://cve.now/CVE-2000-0633.md): Vulnerability in Mandrake Linux usermode package allows local users to to reboot or halt the system. (no CVSS)
- [CVE-2000-0634](https://cve.now/CVE-2000-0634.md): The web administration interface for CommuniGate Pro 3.2.5 and earlier allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2000-0635](https://cve.now/CVE-2000-0635.md): The view\_page.html sample page in the MiniVend shopping cart program allows remote attackers to execute arbitrary commands via shell metacha (no CVSS)
- [CVE-2000-0636](https://cve.now/CVE-2000-0636.md): HP JetDirect printers versions G.08.20 and H.08.20 and earlier allow remote attackers to cause a denial of service via a malformed FTP quote (no CVSS)
- [CVE-2000-0637](https://cve.now/CVE-2000-0637.md): Microsoft Excel 97 and 2000 allows an attacker to execute arbitrary commands by specifying a malicious .dll using the Register.ID function, (no CVSS)
- [CVE-2000-0638](https://cve.now/CVE-2000-0638.md): bb-hostsvc.sh in Big Brother 1.4h1 and earlier allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2000-0639](https://cve.now/CVE-2000-0639.md): The default configuration of Big Brother 1.4h2 and earlier does not include proper access restrictions, which allows remote attackers to exe (no CVSS)
- [CVE-2000-0640](https://cve.now/CVE-2000-0640.md): Guild FTPd allows remote attackers to determine the existence of files outside the FTP root via a .. (no CVSS)
- [CVE-2000-0641](https://cve.now/CVE-2000-0641.md): Savant web server allows remote attackers to execute arbitrary commands via a long GET request. (no CVSS)
- [CVE-2000-0642](https://cve.now/CVE-2000-0642.md): The default configuration of WebActive HTTP Server 1.00 stores the web access log active.log in the document root, which allows remote attac (no CVSS)
- [CVE-2000-0643](https://cve.now/CVE-2000-0643.md): Buffer overflow in WebActive HTTP Server 1.00 allows remote attackers to cause a denial of service via a long URL. (no CVSS)
- [CVE-2000-0644](https://cve.now/CVE-2000-0644.md): WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by executing a STAT command while the LIST command is still ex (no CVSS)
- [CVE-2000-0651](https://cve.now/CVE-2000-0651.md): The ClientTrust program in Novell BorderManager does not properly verify the origin of authentication requests, which could allow remote att (no CVSS)
- [CVE-2000-0652](https://cve.now/CVE-2000-0652.md): IBM WebSphere allows remote attackers to read source code for executable web files by directly calling the default InvokerServlet using a UR (no CVSS)
- [CVE-2000-0654](https://cve.now/CVE-2000-0654.md): Microsoft Enterprise Manager allows local users to obtain database passwords via the Data Transformation Service (DTS) package Registered Se (no CVSS)
- [CVE-2000-0655](https://cve.now/CVE-2000-0655.md): Netscape Communicator 4.73 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a JPEG image c (no CVSS)
- [CVE-2000-0660](https://cve.now/CVE-2000-0660.md): The WDaemon web server for WorldClient 2.1 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2000-0661](https://cve.now/CVE-2000-0661.md): WircSrv IRC Server 5.07s allows remote attackers to cause a denial of service via a long string to the server port. (no CVSS)
- [CVE-2000-0663](https://cve.now/CVE-2000-0663.md): The registry entry for the Windows Shell executable (Explorer.exe) in Windows NT and Windows 2000 uses a relative path name, which allows lo (no CVSS)
- [CVE-2000-0664](https://cve.now/CVE-2000-0664.md): AnalogX SimpleServer:WWW 1.06 and earlier allows remote attackers to read arbitrary files via a modified .. (no CVSS)
- [CVE-2000-0665](https://cve.now/CVE-2000-0665.md): GAMSoft TelSrv telnet server 1.5 and earlier allows remote attackers to cause a denial of service via a long username. (no CVSS)
- [CVE-2000-0666](https://cve.now/CVE-2000-0666.md): rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote at (no CVSS)
- [CVE-2000-0668](https://cve.now/CVE-2000-0668.md): pam\_console PAM module in Linux systems allows a user to access the system console and reboot the system when a display manager such as gdm (no CVSS)
- [CVE-2000-0669](https://cve.now/CVE-2000-0669.md): Novell NetWare 5.0 allows remote attackers to cause a denial of service by flooding port 40193 with random data. (no CVSS)
- [CVE-2000-0670](https://cve.now/CVE-2000-0670.md): The cvsweb CGI script in CVSWeb 1.80 allows remote attackers with write access to a CVS repository to execute arbitrary commands via shell m (no CVSS)
- [CVE-2000-0671](https://cve.now/CVE-2000-0671.md): Roxen web server earlier than 2.0.69 allows allows remote attackers to bypass access restrictions, list directory contents, and read source (no CVSS)
- [CVE-2000-0673](https://cve.now/CVE-2000-0673.md): The NetBIOS Name Server (NBNS) protocol does not perform authentication, which allows remote attackers to cause a denial of service by sendi (no CVSS)
- [CVE-2000-0674](https://cve.now/CVE-2000-0674.md): ftp.pl CGI program for Virtual Visions FTP browser allows remote attackers to read directories outside of the document root via a .. (no CVSS)
- [CVE-2000-0675](https://cve.now/CVE-2000-0675.md): Buffer overflow in Infopulse Gatekeeper 3.5 and earlier allows remote attackers to execute arbitrary commands via a long string. (no CVSS)
- [CVE-2000-0676](https://cve.now/CVE-2000-0676.md): Netscape Communicator and Navigator 4.04 through 4.74 allows remote attackers to read arbitrary files by using a Java applet to open a conne (no CVSS)
- [CVE-2000-0677](https://cve.now/CVE-2000-0677.md): Buffer overflow in IBM Net.Data db2www CGI program allows remote attackers to execute arbitrary commands via a long PATH\_INFO environmental (no CVSS)
- [CVE-2000-0678](https://cve.now/CVE-2000-0678.md): PGP 5.5.x through 6.5.3 does not properly check if an Additional Decryption Key (ADK) is stored in the signed portion of a public certificat (no CVSS)
- [CVE-2000-0681](https://cve.now/CVE-2000-0681.md): Buffer overflow in BEA WebLogic server proxy plugin allows remote attackers to execute arbitrary commands via a long URL with a .JSP extensi (no CVSS)
- [CVE-2000-0682](https://cve.now/CVE-2000-0682.md): BEA WebLogic 5.1.x allows remote attackers to read source code for parsed pages by inserting /ConsoleHelp/ into the URL, which invokes the F (no CVSS)
- [CVE-2000-0683](https://cve.now/CVE-2000-0683.md): BEA WebLogic 5.1.x allows remote attackers to read source code for parsed pages by inserting /\*.shtml/ into the URL, which invokes the SSISe (no CVSS)
- [CVE-2000-0684](https://cve.now/CVE-2000-0684.md): BEA WebLogic 5.1.x does not properly restrict access to the JSPServlet, which could allow remote attackers to compile and execute Java JSP c (no CVSS)
- [CVE-2000-0685](https://cve.now/CVE-2000-0685.md): BEA WebLogic 5.1.x does not properly restrict access to the PageCompileServlet, which could allow remote attackers to compile and execute Ja (no CVSS)
- [CVE-2000-0700](https://cve.now/CVE-2000-0700.md): Cisco Gigabit Switch Routers (GSR) with Fast Ethernet / Gigabit Ethernet cards, from IOS versions 11.2(15)GS1A up to 11.2(19)GS0.2 and some (no CVSS)
- [CVE-2000-0703](https://cve.now/CVE-2000-0703.md): suidperl (aka sperl) does not properly cleanse the escape sequence "~!" before calling /bin/mail to send an error report, which allows local (no CVSS)
- [CVE-2000-0705](https://cve.now/CVE-2000-0705.md): ntop running in web mode allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2000-0706](https://cve.now/CVE-2000-0706.md): Buffer overflows in ntop running in web mode allows remote attackers to execute arbitrary commands. (no CVSS)
- [CVE-2000-0707](https://cve.now/CVE-2000-0707.md): PCCS MySQLDatabase Admin Tool Manager 1.2.4 and earlier installs the file dbconnect.inc within the web root, which allows remote attackers t (no CVSS)
- [CVE-2000-0708](https://cve.now/CVE-2000-0708.md): Buffer overflow in Pragma Systems TelnetServer 2000 version 4.0 allows remote attackers to cause a denial of service via a long series of nu (no CVSS)
- [CVE-2000-0711](https://cve.now/CVE-2000-0711.md): Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which allows remote attacker (no CVSS)
- [CVE-2000-0712](https://cve.now/CVE-2000-0712.md): Linux Intrusion Detection System (LIDS) 0.9.7 allows local users to gain root privileges when LIDS is disabled via the security=0 boot optio (no CVSS)
- [CVE-2000-0718](https://cve.now/CVE-2000-0718.md): A race condition in MandrakeUpdate allows local users to modify RPM files while they are in the /tmp directory before they are installed. (no CVSS)
- [CVE-2000-0725](https://cve.now/CVE-2000-0725.md): Zope before 2.2.1 does not properly restrict access to the getRoles method, which allows users who can edit DTML to add or modify roles by m (no CVSS, zope)
- [CVE-2000-0727](https://cve.now/CVE-2000-0727.md): xpdf PDF viewer client earlier than 0.91 does not properly launch a web browser for embedded URL's, which allows an attacker to execute arbi (no CVSS)
- [CVE-2000-0728](https://cve.now/CVE-2000-0728.md): xpdf PDF viewer client earlier than 0.91 allows local users to overwrite arbitrary files via a symlink attack. (no CVSS)
- [CVE-2000-0730](https://cve.now/CVE-2000-0730.md): Vulnerability in newgrp command in HP-UX 11.0 allows local users to gain privileges. (no CVSS)
- [CVE-2000-0733](https://cve.now/CVE-2000-0733.md): Telnetd telnet server in IRIX 5.2 through 6.1 does not properly cleans user-injected format strings, which allows remote attackers to execut (no CVSS)
- [CVE-2000-0737](https://cve.now/CVE-2000-0737.md): The Service Control Manager (SCM) in Windows 2000 creates predictable named pipes, which allows a local user with console access to gain adm (no CVSS)
- [CVE-2000-0743](https://cve.now/CVE-2000-0743.md): Buffer overflow in University of Minnesota (UMN) gopherd 2.x allows remote attackers to execute arbitrary commands via a DES key generation (no CVSS)
- [CVE-2000-0745](https://cve.now/CVE-2000-0745.md): admin.php3 in PHP-Nuke does not properly verify the PHP-Nuke administrator password, which allows remote attackers to gain privileges by req (no CVSS)
- [CVE-2000-0750](https://cve.now/CVE-2000-0750.md): Buffer overflow in mopd (Maintenance Operations Protocol loader daemon) allows remote attackers to execute arbitrary commands via a long fil (no CVSS)
- [CVE-2000-0751](https://cve.now/CVE-2000-0751.md): mopd (Maintenance Operations Protocol loader daemon) does not properly cleanse user-injected format strings, which allows remote attackers t (no CVSS)
- [CVE-2000-0754](https://cve.now/CVE-2000-0754.md): Vulnerability in HP OpenView Network Node Manager (NMM) version 6.1 related to passwords. (no CVSS)
- [CVE-2000-0758](https://cve.now/CVE-2000-0758.md): The web interface for Lyris List Manager 3 and 4 allows list subscribers to obtain administrative access by modifying the value of the list\_ (no CVSS)
- [CVE-2000-0761](https://cve.now/CVE-2000-0761.md): OS2/Warp 4.5 FTP server allows remote attackers to cause a denial of service via a long username. (no CVSS)
- [CVE-2000-0763](https://cve.now/CVE-2000-0763.md): xlockmore and xlockf do not properly cleanse user-injected format strings, which allows local users to gain root privileges via the -d optio (no CVSS)
- [CVE-2000-0765](https://cve.now/CVE-2000-0765.md): Buffer overflow in the HTML interpreter in Microsoft Office 2000 allows an attacker to execute arbitrary commands via a long embedded object (no CVSS)
- [CVE-2000-0767](https://cve.now/CVE-2000-0767.md): The ActiveX control for invoking a scriptlet in Internet Explorer 4.x and 5.x renders arbitrary file types instead of HTML, which allows an (no CVSS)
- [CVE-2000-0768](https://cve.now/CVE-2000-0768.md): A function in Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote at (no CVSS)
- [CVE-2000-0770](https://cve.now/CVE-2000-0770.md): IIS 4.0 and 5.0 does not properly restrict access to certain types of files when their parent folders have less restrictive permissions, whi (no CVSS)
- [CVE-2000-0771](https://cve.now/CVE-2000-0771.md): Microsoft Windows 2000 allows local users to cause a denial of service by corrupting the local security policy via malformed RPC traffic, ak (no CVSS)
- [CVE-2000-0777](https://cve.now/CVE-2000-0777.md): The password protection feature of Microsoft Money can store the password in plaintext, which allows attackers with physical access to the s (no CVSS)
- [CVE-2000-0778](https://cve.now/CVE-2000-0778.md): IIS 5.0 allows remote attackers to obtain source code for .ASP files and other scripts via an HTTP GET request with a "Translate: f" header, (no CVSS)
- [CVE-2000-0779](https://cve.now/CVE-2000-0779.md): Checkpoint Firewall-1 with the RSH/REXEC setting enabled allows remote attackers to bypass access restrictions and connect to a RSH/REXEC cl (no CVSS)
- [CVE-2000-0780](https://cve.now/CVE-2000-0780.md): The web server in IPSWITCH IMail 6.04 and earlier allows remote attackers to read and delete arbitrary files via a .. (no CVSS)
- [CVE-2000-0782](https://cve.now/CVE-2000-0782.md): netauth.cgi program in Netwin Netauth 4.2e and earlier allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2000-0786](https://cve.now/CVE-2000-0786.md): GNU userv 1.0.0 and earlier does not properly perform file descriptor swapping, which can corrupt the USERV\_GROUPS and USERV\_GIDS environmen (no CVSS)
- [CVE-2000-0787](https://cve.now/CVE-2000-0787.md): IRC Xchat client versions 1.4.2 and earlier allows remote attackers to execute arbitrary commands by encoding shell metacharacters into a UR (no CVSS)
- [CVE-2000-0792](https://cve.now/CVE-2000-0792.md): Gnome Lokkit firewall package before 0.41 does not properly restrict access to some ports, even if a user does not make any services availab (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2000-10-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.