# CVEs published 2000-10-18

22 CVEs were published on October 18, 2000: 0 critical, 0 high. Days are UTC.

- [CVE-2000-0812](https://cve.now/CVE-2000-0812.md): The administration module in Sun Java web server allows remote attackers to execute arbitrary commands by uploading Java code to the module (no CVSS)
- [CVE-2000-0826](https://cve.now/CVE-2000-0826.md): Buffer overflow in ddicgi.exe program in Mobius DocumentDirect for the Internet 1.2 allows remote attackers to execute arbitrary commands vi (no CVSS)
- [CVE-2000-0827](https://cve.now/CVE-2000-0827.md): Buffer overflow in the web authorization form of Mobius DocumentDirect for the Internet 1.2 allows remote attackers to cause a denial of ser (no CVSS)
- [CVE-2000-0828](https://cve.now/CVE-2000-0828.md): Buffer overflow in ddicgi.exe in Mobius DocumentDirect for the Internet 1.2 allows remote attackers to execute arbitrary commands via a long (no CVSS)
- [CVE-2000-0831](https://cve.now/CVE-2000-0831.md): Buffer overflow in Fastream FTP++ 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a lon (no CVSS)
- [CVE-2000-0832](https://cve.now/CVE-2000-0832.md): Htgrep CGI program allows remote attackers to read arbitrary files by specifying the full pathname in the hdr parameter. (no CVSS)
- [CVE-2000-0833](https://cve.now/CVE-2000-0833.md): Buffer overflow in WinSMTP 1.06f and 2.X allows remote attackers to cause a denial of service via a long (1) USER or (2) HELO command. (no CVSS)
- [CVE-2000-0835](https://cve.now/CVE-2000-0835.md): search.dll Sambar ISAPI Search utility in Sambar Server 4.4 Beta 3 allows remote attackers to read arbitrary directories by specifying the d (no CVSS)
- [CVE-2000-0836](https://cve.now/CVE-2000-0836.md): Buffer overflow in CamShot WebCam Trial2.6 allows remote attackers to execute arbitrary commands via a long Authorization header. (no CVSS)
- [CVE-2000-0840](https://cve.now/CVE-2000-0840.md): Buffer overflow in XMail POP3 server before version 0.59 allows remote attackers to execute arbitrary commands via a long USER command. (no CVSS)
- [CVE-2000-0841](https://cve.now/CVE-2000-0841.md): Buffer overflow in XMail POP3 server before version 0.59 allows remote attackers to execute arbitrary commands via a long APOP command. (no CVSS)
- [CVE-2000-0842](https://cve.now/CVE-2000-0842.md): The search97cgi/vtopic" in the UnixWare 7 scohelphttp webserver allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2000-0843](https://cve.now/CVE-2000-0843.md): Buffer overflow in pam\_smb and pam\_ntdom pluggable authentication modules (PAM) allow remote attackers to execute arbitrary commands via a l (no CVSS)
- [CVE-2000-0845](https://cve.now/CVE-2000-0845.md): kdebug daemon (kdebugd) in Digital Unix 4.0F allows remote attackers to read arbitrary files by specifying the full file name in the initial (no CVSS)
- [CVE-2000-0855](https://cve.now/CVE-2000-0855.md): SunFTP build 9(1) allows remote attackers to cause a denial of service by connecting to the server and disconnecting before sending a newlin (no CVSS)
- [CVE-2000-0857](https://cve.now/CVE-2000-0857.md): The logging capability in muh 2.05d IRC server does not properly cleanse user-injected format strings, which allows remote attackers to caus (no CVSS)
- [CVE-2000-0866](https://cve.now/CVE-2000-0866.md): Interbase 6 SuperServer for Linux allows an attacker to cause a denial of service via a query containing 0 bytes. (no CVSS)
- [CVE-2000-0872](https://cve.now/CVE-2000-0872.md): explorer.php in PhotoAlbum 0.9.9 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2000-0879](https://cve.now/CVE-2000-0879.md): LPPlus programs dccsched, dcclpdser, dccbkst, dccshut, dcclpdshut, and dccbkstshut are installed setuid root and world executable, which all (no CVSS)
- [CVE-2000-0880](https://cve.now/CVE-2000-0880.md): LPPlus creates the lpdprocess file with world-writeable permissions, which allows local users to kill arbitrary processes by specifying an a (no CVSS)
- [CVE-2000-0881](https://cve.now/CVE-2000-0881.md): The dccscan setuid program in LPPlus does not properly check if the user has the permissions to print the file that is specified to dccscan, (no CVSS)
- [CVE-2000-0882](https://cve.now/CVE-2000-0882.md): Intel Express 500 series switches allow a remote attacker to cause a denial of service via a malformed ICMP packet, which causes the CPU to (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2000-10-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.