# CVEs published 2000-11-29

53 CVEs were published on November 29, 2000: 0 critical, 0 high. Days are UTC.

- [CVE-2000-0817](https://cve.now/CVE-2000-0817.md): Buffer overflow in the HTTP protocol parser for Microsoft Network Monitor (Netmon) allows remote attackers to execute arbitrary commands via (no CVSS)
- [CVE-2000-0885](https://cve.now/CVE-2000-0885.md): Buffer overflows in Microsoft Network Monitor (Netmon) allow remote attackers to execute arbitrary commands via a long Browser Name in a CIF (no CVSS)
- [CVE-2000-0902](https://cve.now/CVE-2000-0902.md): getalbum.php in PhotoAlbum before 0.9.9 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2000-0903](https://cve.now/CVE-2000-0903.md): Directory traversal vulnerability in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read arbitrary files (no CVSS)
- [CVE-2000-0904](https://cve.now/CVE-2000-0904.md): Voyager web server 2.01B in the demo disks for QNX 405 stores sensitive web client information in the .photon directory in the web document (no CVSS)
- [CVE-2000-0905](https://cve.now/CVE-2000-0905.md): QNX Embedded Resource Manager in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read sensitive system sta (no CVSS)
- [CVE-2000-0906](https://cve.now/CVE-2000-0906.md): Directory traversal vulnerability in Moreover.com cached\_feed.cgi script version 4.July.00 allows remote attackers to read arbitrary files v (no CVSS)
- [CVE-2000-0907](https://cve.now/CVE-2000-0907.md): EServ 2.92 Build 2982 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long HELO and MAIL FR (no CVSS)
- [CVE-2000-0916](https://cve.now/CVE-2000-0916.md): FreeBSD 4.1.1 and earlier, and possibly other BSD-based OSes, uses an insufficient random number generator to generate initial TCP sequence (no CVSS)
- [CVE-2000-0918](https://cve.now/CVE-2000-0918.md): Format string vulnerability in kvt in KDE 1.1.2 may allow local users to execute arbitrary commands via a DISPLAY environmental variable tha (no CVSS)
- [CVE-2000-0931](https://cve.now/CVE-2000-0931.md): Buffer overflow in Pegasus Mail 3.11 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long (no CVSS)
- [CVE-2000-0939](https://cve.now/CVE-2000-0939.md): Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows remote attackers to cause a denial of service by repeatedly submitting a nonstand (no CVSS)
- [CVE-2000-0940](https://cve.now/CVE-2000-0940.md): Directory traversal vulnerability in Metertek pagelog.cgi allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2000-0950](https://cve.now/CVE-2000-0950.md): Format string vulnerability in x-gw in TIS Firewall Toolkit (FWTK) allows local users to execute arbitrary commands via a malformed display (no CVSS)
- [CVE-2000-0954](https://cve.now/CVE-2000-0954.md): Shambala Server 4.5 stores passwords in plaintext, which could allow local users to obtain the passwords and compromise the server. (no CVSS)
- [CVE-2000-0955](https://cve.now/CVE-2000-0955.md): Cisco Virtual Central Office 4000 (VCO/4K) uses weak encryption to store usernames and passwords in the SNMP MIB, which allows an attacker w (no CVSS)
- [CVE-2000-0963](https://cve.now/CVE-2000-0963.md): Buffer overflow in ncurses library allows local users to execute arbitrary commands via long environmental information such as TERM or TERMI (no CVSS)
- [CVE-2000-0971](https://cve.now/CVE-2000-0971.md): Avirt Mail 4.0 and 4.2 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long "RCPT TO" or (no CVSS)
- [CVE-2000-0985](https://cve.now/CVE-2000-0985.md): Buffer overflow in All-Mail 1.1 allows remote attackers to execute arbitrary commands via a long "MAIL FROM" or "RCPT TO" command. (no CVSS)
- [CVE-2000-0986](https://cve.now/CVE-2000-0986.md): Buffer overflow in Oracle 8.1.5 applications such as names, namesctl, onrsd, osslogin, tnslsnr, tnsping, trcasst, and trcroute possibly allo (no CVSS)
- [CVE-2000-0987](https://cve.now/CVE-2000-0987.md): Buffer overflow in oidldapd in Oracle 8.1.6 allow local users to gain privileges via a long "connect" command line parameter. (no CVSS)
- [CVE-2000-0988](https://cve.now/CVE-2000-0988.md): WinU 1.0 through 5.1 has a backdoor password that allows remote attackers to gain access to its administrative interface and modify configur (no CVSS)
- [CVE-2000-0997](https://cve.now/CVE-2000-0997.md): Format string vulnerabilities in eeprom program in OpenBSD, NetBSD, and possibly other operating systems allows local attackers to gain root (no CVSS)
- [CVE-2000-0998](https://cve.now/CVE-2000-0998.md): Format string vulnerability in top program allows local attackers to gain root privileges via the "kill" or "renice" function. (no CVSS)
- [CVE-2000-0999](https://cve.now/CVE-2000-0999.md): Format string vulnerabilities in OpenBSD ssh program (and possibly other BSD-based operating systems) allow attackers to gain root privilege (no CVSS)
- [CVE-2000-1008](https://cve.now/CVE-2000-1008.md): PalmOS 3.5.2 and earlier uses weak encryption to store the user password, which allows attackers with physical access to the Palm device to (no CVSS)
- [CVE-2000-1009](https://cve.now/CVE-2000-1009.md): dump in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privilege (no CVSS)
- [CVE-2000-1012](https://cve.now/CVE-2000-1012.md): The catopen function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmen (no CVSS)
- [CVE-2000-1013](https://cve.now/CVE-2000-1013.md): The setlocale function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environm (no CVSS)
- [CVE-2000-1015](https://cve.now/CVE-2000-1015.md): The default configuration of Slashcode before version 2.0 Alpha has a default administrative password, which allows remote attackers to gain (no CVSS)
- [CVE-2000-1017](https://cve.now/CVE-2000-1017.md): Webteachers Webdata allows remote attackers with valid Webdata accounts to read arbitrary files by posting a request to import the file into (no CVSS)
- [CVE-2000-1020](https://cve.now/CVE-2000-1020.md): Heap overflow in Worldclient in Mdaemon 3.1.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrar (no CVSS)
- [CVE-2000-1021](https://cve.now/CVE-2000-1021.md): Heap overflow in WebConfig in Mdaemon 3.1.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary (no CVSS)
- [CVE-2000-1023](https://cve.now/CVE-2000-1023.md): The Alabanza Control Panel does not require passwords to access administrative commands, which allows remote attackers to modify domain name (no CVSS)
- [CVE-2000-1025](https://cve.now/CVE-2000-1025.md): eWave ServletExec JSP/Java servlet engine, versions 3.0C and earlier, allows remote attackers to cause a denial of service via a URL that co (no CVSS)
- [CVE-2000-1028](https://cve.now/CVE-2000-1028.md): Buffer overflow in cu program in HP-UX 11.0 may allow local users to gain privileges via a long -l command line argument. (no CVSS)
- [CVE-2000-1029](https://cve.now/CVE-2000-1029.md): Buffer overflow in host command allows a remote attacker to execute arbitrary commands via a long response to an AXFR query. (no CVSS)
- [CVE-2000-1030](https://cve.now/CVE-2000-1030.md): CS&T CorporateTime for the Web returns different error messages for invalid usernames and invalid passwords, which allows remote attackers t (no CVSS)
- [CVE-2000-1033](https://cve.now/CVE-2000-1033.md): Serv-U FTP Server allows remote attackers to bypass its anti-hammering feature by first logging on as a valid user (possibly anonymous) and (no CVSS)
- [CVE-2000-1035](https://cve.now/CVE-2000-1035.md): Buffer overflows in TYPSoft FTP Server 0.78 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary (no CVSS)
- [CVE-2000-1037](https://cve.now/CVE-2000-1037.md): Check Point Firewall-1 session agent 3.0 through 4.1 generates different error messages for invalid user names versus invalid passwords, whi (no CVSS)
- [CVE-2000-1046](https://cve.now/CVE-2000-1046.md): Multiple buffer overflows in the ESMTP service of Lotus Domino 5.0.2c and earlier allow remote attackers to cause a denial of service and po (no CVSS)
- [CVE-2000-1048](https://cve.now/CVE-2000-1048.md): Directory traversal vulnerability in the logfile service of Wingate 4.1 Beta A and earlier allows remote attackers to read arbitrary files v (no CVSS)
- [CVE-2000-1052](https://cve.now/CVE-2000-1052.md): Allaire JRun 2.3 server allows remote attackers to obtain source code for executable content by directly calling the SSIFilter servlet. (no CVSS)
- [CVE-2000-1053](https://cve.now/CVE-2000-1053.md): Allaire JRun 2.3.3 server allows remote attackers to compile and execute JSP code by inserting it via a cross-site scripting (CSS) attack an (no CVSS)
- [CVE-2000-1062](https://cve.now/CVE-2000-1062.md): Buffer overflow in the FTP service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of se (no CVSS)
- [CVE-2000-1063](https://cve.now/CVE-2000-1063.md): Buffer overflow in the Telnet service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of (no CVSS)
- [CVE-2000-1064](https://cve.now/CVE-2000-1064.md): Buffer overflow in the LPD service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of se (no CVSS)
- [CVE-2000-1065](https://cve.now/CVE-2000-1065.md): Vulnerability in IP implementation of HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of se (no CVSS)
- [CVE-2000-1066](https://cve.now/CVE-2000-1066.md): The getnameinfo function in FreeBSD 4.1.1 and earlier, and possibly other operating systems, allows a remote attacker to cause a denial of s (no CVSS)
- [CVE-2000-1076](https://cve.now/CVE-2000-1076.md): Netscape (iPlanet) Certificate Management System 4.2 and Directory Server 4.12 stores the administrative password in plaintext, which could (no CVSS)
- [CVE-2000-1078](https://cve.now/CVE-2000-1078.md): ICQ Web Front HTTPd allows remote attackers to cause a denial of service by requesting a URL that contains a "?" character. (no CVSS)
- [CVE-2000-1079](https://cve.now/CVE-2000-1079.md): Interactions between the CIFS Browser Protocol and NetBIOS as implemented in Microsoft Windows 95, 98, NT, and 2000 allow remote attackers t (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2000-11-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.