CVEs published November 29, 2000
53 CVEs were published on November 29, 2000: 0 critical, 0 high.
- Published
- 53
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 53
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 53
- CVE-2000-0817Buffer overflow in the HTTP protocol parser for Microsoft Network Monitor (Netmon) allows remote attackers to execute arbitrary commands via
- CVE-2000-0885Buffer overflows in Microsoft Network Monitor (Netmon) allow remote attackers to execute arbitrary commands via a long Browser Name in a CIF
- CVE-2000-0902getalbum.php in PhotoAlbum before 0.9.9 allows remote attackers to read arbitrary files via a ..
- CVE-2000-0903Directory traversal vulnerability in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read arbitrary files
- CVE-2000-0904Voyager web server 2.01B in the demo disks for QNX 405 stores sensitive web client information in the .photon directory in the web document
- CVE-2000-0905QNX Embedded Resource Manager in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read sensitive system sta
- CVE-2000-0906Directory traversal vulnerability in Moreover.com cached_feed.cgi script version 4.July.00 allows remote attackers to read arbitrary files v
- CVE-2000-0907EServ 2.92 Build 2982 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long HELO and MAIL FR
- CVE-2000-0916FreeBSD 4.1.1 and earlier, and possibly other BSD-based OSes, uses an insufficient random number generator to generate initial TCP sequence
- CVE-2000-0918Format string vulnerability in kvt in KDE 1.1.2 may allow local users to execute arbitrary commands via a DISPLAY environmental variable tha
- CVE-2000-0931Buffer overflow in Pegasus Mail 3.11 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long
- CVE-2000-0939Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows remote attackers to cause a denial of service by repeatedly submitting a nonstand
- CVE-2000-0940Directory traversal vulnerability in Metertek pagelog.cgi allows remote attackers to read arbitrary files via a ..
- CVE-2000-0950Format string vulnerability in x-gw in TIS Firewall Toolkit (FWTK) allows local users to execute arbitrary commands via a malformed display
- CVE-2000-0954Shambala Server 4.5 stores passwords in plaintext, which could allow local users to obtain the passwords and compromise the server.
- CVE-2000-0955Cisco Virtual Central Office 4000 (VCO/4K) uses weak encryption to store usernames and passwords in the SNMP MIB, which allows an attacker w
- CVE-2000-0963Buffer overflow in ncurses library allows local users to execute arbitrary commands via long environmental information such as TERM or TERMI
- CVE-2000-0971Avirt Mail 4.0 and 4.2 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long "RCPT TO" or
- CVE-2000-0985Buffer overflow in All-Mail 1.1 allows remote attackers to execute arbitrary commands via a long "MAIL FROM" or "RCPT TO" command.
- CVE-2000-0986Buffer overflow in Oracle 8.1.5 applications such as names, namesctl, onrsd, osslogin, tnslsnr, tnsping, trcasst, and trcroute possibly allo
- CVE-2000-0987Buffer overflow in oidldapd in Oracle 8.1.6 allow local users to gain privileges via a long "connect" command line parameter.
- CVE-2000-0988WinU 1.0 through 5.1 has a backdoor password that allows remote attackers to gain access to its administrative interface and modify configur
- CVE-2000-0997Format string vulnerabilities in eeprom program in OpenBSD, NetBSD, and possibly other operating systems allows local attackers to gain root
- CVE-2000-0998Format string vulnerability in top program allows local attackers to gain root privileges via the "kill" or "renice" function.
- CVE-2000-0999Format string vulnerabilities in OpenBSD ssh program (and possibly other BSD-based operating systems) allow attackers to gain root privilege
- CVE-2000-1008PalmOS 3.5.2 and earlier uses weak encryption to store the user password, which allows attackers with physical access to the Palm device to
- CVE-2000-1009dump in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privilege
- CVE-2000-1012The catopen function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmen
- CVE-2000-1013The setlocale function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environm
- CVE-2000-1015The default configuration of Slashcode before version 2.0 Alpha has a default administrative password, which allows remote attackers to gain
- CVE-2000-1017Webteachers Webdata allows remote attackers with valid Webdata accounts to read arbitrary files by posting a request to import the file into
- CVE-2000-1020Heap overflow in Worldclient in Mdaemon 3.1.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrar
- CVE-2000-1021Heap overflow in WebConfig in Mdaemon 3.1.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary
- CVE-2000-1023The Alabanza Control Panel does not require passwords to access administrative commands, which allows remote attackers to modify domain name
- CVE-2000-1025eWave ServletExec JSP/Java servlet engine, versions 3.0C and earlier, allows remote attackers to cause a denial of service via a URL that co
- CVE-2000-1028Buffer overflow in cu program in HP-UX 11.0 may allow local users to gain privileges via a long -l command line argument.
- CVE-2000-1029Buffer overflow in host command allows a remote attacker to execute arbitrary commands via a long response to an AXFR query.
- CVE-2000-1030CS&T CorporateTime for the Web returns different error messages for invalid usernames and invalid passwords, which allows remote attackers t
- CVE-2000-1033Serv-U FTP Server allows remote attackers to bypass its anti-hammering feature by first logging on as a valid user (possibly anonymous) and
- CVE-2000-1035Buffer overflows in TYPSoft FTP Server 0.78 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary
- CVE-2000-1037Check Point Firewall-1 session agent 3.0 through 4.1 generates different error messages for invalid user names versus invalid passwords, whi
- CVE-2000-1046Multiple buffer overflows in the ESMTP service of Lotus Domino 5.0.2c and earlier allow remote attackers to cause a denial of service and po
- CVE-2000-1048Directory traversal vulnerability in the logfile service of Wingate 4.1 Beta A and earlier allows remote attackers to read arbitrary files v
- CVE-2000-1052Allaire JRun 2.3 server allows remote attackers to obtain source code for executable content by directly calling the SSIFilter servlet.
- CVE-2000-1053Allaire JRun 2.3.3 server allows remote attackers to compile and execute JSP code by inserting it via a cross-site scripting (CSS) attack an
- CVE-2000-1062Buffer overflow in the FTP service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of se
- CVE-2000-1063Buffer overflow in the Telnet service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of
- CVE-2000-1064Buffer overflow in the LPD service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of se
- CVE-2000-1065Vulnerability in IP implementation of HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of se
- CVE-2000-1066The getnameinfo function in FreeBSD 4.1.1 and earlier, and possibly other operating systems, allows a remote attacker to cause a denial of s
- CVE-2000-1076Netscape (iPlanet) Certificate Management System 4.2 and Directory Server 4.12 stores the administrative password in plaintext, which could
- CVE-2000-1078ICQ Web Front HTTPd allows remote attackers to cause a denial of service by requesting a URL that contains a "?" character.
- CVE-2000-1079Interactions between the CIFS Browser Protocol and NetBIOS as implemented in Microsoft Windows 95, 98, NT, and 2000 allow remote attackers t