CVEs published December 19, 2000
56 CVEs were published on December 19, 2000: 0 critical, 0 high.
- Published
- 56
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 56
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 56
- CVE-2000-0898Small HTTP Server 2.01 does not properly process Server Side Includes (SSI) tags that contain null values, which allows local users, and pos
- CVE-2000-0899Small HTTP Server 2.01 allows remote attackers to cause a denial of service by connecting to the server and sending out multiple GET, HEAD,
- CVE-2000-1039Various TCP/IP stacks and network applications allow remote attackers to cause a denial of service by flooding a target host with TCP connec
- CVE-2000-1081The xp_displayparamstmt function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buf
- CVE-2000-1082The xp_enumresultset function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer
- CVE-2000-1083The xp_showcolv function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer befo
- CVE-2000-1084The xp_updatecolvbm function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer
- CVE-2000-1085The xp_peekqueue function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffe
- CVE-2000-1086The xp_printstatements function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a
- CVE-2000-1087The xp_proxiedmetadata function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a
- CVE-2000-1088The xp_SetSQLSecurity function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a
- CVE-2000-1092loadpage.cgi CGI program in EZshopper 3.0 and 2.0 allows remote attackers to list and read files in the EZshopper data directory by insertin
- CVE-2000-1093Buffer overflow in AOL Instant Messenger before 4.3.2229 allows remote attackers to execute arbitrary commands via a long "goim" command.
- CVE-2000-1098The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via an empty GET or POST request.
- CVE-2000-1100The default configuration for PostACI webmail system installs the /includes/global.inc configuration file within the web root, which allows
- CVE-2000-1102PTlink IRCD 3.5.3 and PTlink Services 1.8.1 allow remote attackers to cause a denial of service (server crash) via "mode +owgscfxeb" and "op
- CVE-2000-1103rcvtty in BSD 3.0 and 4.0 does not properly drop privileges before executing a script, which allows local attackers to gain privileges by sp
- CVE-2000-1104Variant of the "IIS Cross-Site Scripting" vulnerability as originally discussed in MS:MS00-060 (CVE-2000-0746) allows a malicious web site o
- CVE-2000-1105The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site operators to embed a script that remotely de
- CVE-2000-1110document.d2w CGI program in the IBM Net.Data db2www package allows remote attackers to determine the physical path of the web server by send
- CVE-2000-1114Unify ServletExec AS v3.0C allows remote attackers to read source code for JSP pages via an HTTP request that ends with characters such as "
- CVE-2000-1116Buffer overflow in TransSoft Broker FTP Server before 4.3.0.1 allows remote attackers to cause a denial of service and possibly execute arbi
- CVE-2000-1117The Extended Control List (ECL) feature of the Java Virtual Machine (JVM) in Lotus Notes Client R5 allows malicious web site operators to de
- CVE-2000-111824Link 1.06 web server allows remote attackers to bypass access restrictions by prepending strings such as "/+/" or "/." to the HTTP GET req
- CVE-2000-1125restore 0.4b15 and earlier in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to
- CVE-2000-1126Vulnerability in auto_parms and set_parms in HP-UX 11.00 and earlier allows remote attackers to execute arbitrary commands or cause a denial
- CVE-2000-1127registrar in the HP resource monitor service allows local users to read and modify arbitrary files by renaming the original registrar.log lo
- CVE-2000-1128The default configuration of McAfee VirusScan 4.5 does not quote the ImagePath variable, which improperly sets the search path and allows lo
- CVE-2000-1129McAfee WebShield SMTP 4.5 allows remote attackers to cause a denial of service via a malformed recipient field.
- CVE-2000-1130McAfee WebShield SMTP 4.5 allows remote attackers to bypass email content filtering rules by including Extended ASCII characters in name of
- CVE-2000-1133Authentix Authentix100 allows remote attackers to bypass authentication by inserting a .
- CVE-2000-1134Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when processing << redir
- CVE-2000-1138Lotus Notes R5 client R5.0.5 and earlier does not properly warn users when an S/MIME email message has been modified, which could allow an a
- CVE-2000-1147Buffer overflow in IIS ISAPI .ASP parsing mechanism allows attackers to execute arbitrary commands via a long string to the "LANGUAGE" argum
- CVE-2000-1150Felix IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL.
- CVE-2000-1151Baxter IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL.
- CVE-2000-1152Browser IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL.
- CVE-2000-1153PostMaster 1.0 in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL.
- CVE-2000-1154RHConsole in RobinHood 1.1 web server in BeOS r5 pro and earlier allows remote attackers to cause a denial of service via long HTTP request.
- CVE-2000-1155RHDaemon in RobinHood 1.1 web server in BeOS r5 pro and earlier allows remote attackers to cause a denial of service via long HTTP request.
- CVE-2000-1156StarOffice 5.2 follows symlinks and sets world-readable permissions for the /tmp/soffice.tmp directory, which allows a local user to read fi
- CVE-2000-1157Buffer overflow in NAI Sniffer Agent allows remote attackers to execute arbitrary commands via a long SNMP community name.
- CVE-2000-1158NAI Sniffer Agent uses base64 encoding for authentication, which allows attackers to sniff the network and easily decrypt usernames and pass
- CVE-2000-1159NAI Sniffer Agent allows remote attackers to gain privileges on the agent by sniffing the initial UDP authentication packets and spoofing co
- CVE-2000-1160NAI Sniffer Agent allows remote attackers to cause a denial of service (crash) by sending a large number of login requests.
- CVE-2000-1161The installation of AdCycle banner management system leaves the build.cgi program in a web-accessible directory, which allows remote attacke
- CVE-2000-1168IBM HTTP Server 1.3.6 (based on Apache) allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a l
- CVE-2000-1172Buffer overflow in Gaim 0.10.3 and earlier using the OSCAR protocol allows remote attackers to conduct a denial of service and possibly exec
- CVE-2000-1173Microsys CyberPatrol uses weak encryption (trivial encoding) for credit card numbers and uses no encryption for the remainder of the informa
- CVE-2000-1175Buffer overflow in Koules 1.4 allows local users to execute arbitrary commands via a long command line argument.
- CVE-2000-1176Directory traversal vulnerability in YaBB search.pl CGI script allows remote attackers to read arbitrary files via a ..
- CVE-2000-1177bb-hist.sh, bb-histlog.sh, bb-hostsvc.sh, bb-rep.sh, bb-replog.sh, and bb-ack.sh in Big Brother (BB) before 1.5d3 allows remote attackers to
- CVE-2000-1183Buffer overflow in socks5 server on Linux allows attackers to execute arbitrary commands via a long connection request.
- CVE-2000-1185The telnet proxy in RideWay PN proxy server allows remote attackers to cause a denial of service via a flood of connections that contain mal
- CVE-2000-1186Buffer overflow in phf CGI program allows remote attackers to execute arbitrary commands by specifying a large number of arguments and inclu
- CVE-2000-1188Directory traversal vulnerability in Quikstore shopping cart program allows remote attackers to read arbitrary files via a ..