# CVEs published 2000-12-19

56 CVEs were published on December 19, 2000: 0 critical, 0 high. Days are UTC.

- [CVE-2000-0898](https://cve.now/CVE-2000-0898.md): Small HTTP Server 2.01 does not properly process Server Side Includes (SSI) tags that contain null values, which allows local users, and pos (no CVSS)
- [CVE-2000-0899](https://cve.now/CVE-2000-0899.md): Small HTTP Server 2.01 allows remote attackers to cause a denial of service by connecting to the server and sending out multiple GET, HEAD, (no CVSS)
- [CVE-2000-1039](https://cve.now/CVE-2000-1039.md): Various TCP/IP stacks and network applications allow remote attackers to cause a denial of service by flooding a target host with TCP connec (no CVSS)
- [CVE-2000-1081](https://cve.now/CVE-2000-1081.md): The xp\_displayparamstmt function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buf (no CVSS)
- [CVE-2000-1082](https://cve.now/CVE-2000-1082.md): The xp\_enumresultset function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer (no CVSS)
- [CVE-2000-1083](https://cve.now/CVE-2000-1083.md): The xp\_showcolv function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer befo (no CVSS)
- [CVE-2000-1084](https://cve.now/CVE-2000-1084.md): The xp\_updatecolvbm function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer (no CVSS)
- [CVE-2000-1085](https://cve.now/CVE-2000-1085.md): The xp\_peekqueue function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffe (no CVSS)
- [CVE-2000-1086](https://cve.now/CVE-2000-1086.md): The xp\_printstatements function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a (no CVSS)
- [CVE-2000-1087](https://cve.now/CVE-2000-1087.md): The xp\_proxiedmetadata function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a (no CVSS)
- [CVE-2000-1088](https://cve.now/CVE-2000-1088.md): The xp\_SetSQLSecurity function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a (no CVSS)
- [CVE-2000-1092](https://cve.now/CVE-2000-1092.md): loadpage.cgi CGI program in EZshopper 3.0 and 2.0 allows remote attackers to list and read files in the EZshopper data directory by insertin (no CVSS)
- [CVE-2000-1093](https://cve.now/CVE-2000-1093.md): Buffer overflow in AOL Instant Messenger before 4.3.2229 allows remote attackers to execute arbitrary commands via a long "goim" command. (no CVSS)
- [CVE-2000-1098](https://cve.now/CVE-2000-1098.md): The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via an empty GET or POST request. (no CVSS)
- [CVE-2000-1100](https://cve.now/CVE-2000-1100.md): The default configuration for PostACI webmail system installs the /includes/global.inc configuration file within the web root, which allows (no CVSS)
- [CVE-2000-1102](https://cve.now/CVE-2000-1102.md): PTlink IRCD 3.5.3 and PTlink Services 1.8.1 allow remote attackers to cause a denial of service (server crash) via "mode +owgscfxeb" and "op (no CVSS)
- [CVE-2000-1103](https://cve.now/CVE-2000-1103.md): rcvtty in BSD 3.0 and 4.0 does not properly drop privileges before executing a script, which allows local attackers to gain privileges by sp (no CVSS)
- [CVE-2000-1104](https://cve.now/CVE-2000-1104.md): Variant of the "IIS Cross-Site Scripting" vulnerability as originally discussed in MS:MS00-060 (CVE-2000-0746) allows a malicious web site o (no CVSS)
- [CVE-2000-1105](https://cve.now/CVE-2000-1105.md): The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site operators to embed a script that remotely de (no CVSS)
- [CVE-2000-1110](https://cve.now/CVE-2000-1110.md): document.d2w CGI program in the IBM Net.Data db2www package allows remote attackers to determine the physical path of the web server by send (no CVSS)
- [CVE-2000-1114](https://cve.now/CVE-2000-1114.md): Unify ServletExec AS v3.0C allows remote attackers to read source code for JSP pages via an HTTP request that ends with characters such as " (no CVSS)
- [CVE-2000-1116](https://cve.now/CVE-2000-1116.md): Buffer overflow in TransSoft Broker FTP Server before 4.3.0.1 allows remote attackers to cause a denial of service and possibly execute arbi (no CVSS)
- [CVE-2000-1117](https://cve.now/CVE-2000-1117.md): The Extended Control List (ECL) feature of the Java Virtual Machine (JVM) in Lotus Notes Client R5 allows malicious web site operators to de (no CVSS)
- [CVE-2000-1118](https://cve.now/CVE-2000-1118.md): 24Link 1.06 web server allows remote attackers to bypass access restrictions by prepending strings such as "/+/" or "/." to the HTTP GET req (no CVSS)
- [CVE-2000-1125](https://cve.now/CVE-2000-1125.md): restore 0.4b15 and earlier in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to (no CVSS)
- [CVE-2000-1126](https://cve.now/CVE-2000-1126.md): Vulnerability in auto\_parms and set\_parms in HP-UX 11.00 and earlier allows remote attackers to execute arbitrary commands or cause a denial (no CVSS)
- [CVE-2000-1127](https://cve.now/CVE-2000-1127.md): registrar in the HP resource monitor service allows local users to read and modify arbitrary files by renaming the original registrar.log lo (no CVSS)
- [CVE-2000-1128](https://cve.now/CVE-2000-1128.md): The default configuration of McAfee VirusScan 4.5 does not quote the ImagePath variable, which improperly sets the search path and allows lo (no CVSS)
- [CVE-2000-1129](https://cve.now/CVE-2000-1129.md): McAfee WebShield SMTP 4.5 allows remote attackers to cause a denial of service via a malformed recipient field. (no CVSS)
- [CVE-2000-1130](https://cve.now/CVE-2000-1130.md): McAfee WebShield SMTP 4.5 allows remote attackers to bypass email content filtering rules by including Extended ASCII characters in name of (no CVSS)
- [CVE-2000-1133](https://cve.now/CVE-2000-1133.md): Authentix Authentix100 allows remote attackers to bypass authentication by inserting a . (no CVSS)
- [CVE-2000-1134](https://cve.now/CVE-2000-1134.md): Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when processing \<\< redir (no CVSS)
- [CVE-2000-1138](https://cve.now/CVE-2000-1138.md): Lotus Notes R5 client R5.0.5 and earlier does not properly warn users when an S/MIME email message has been modified, which could allow an a (no CVSS)
- [CVE-2000-1147](https://cve.now/CVE-2000-1147.md): Buffer overflow in IIS ISAPI .ASP parsing mechanism allows attackers to execute arbitrary commands via a long string to the "LANGUAGE" argum (no CVSS)
- [CVE-2000-1150](https://cve.now/CVE-2000-1150.md): Felix IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL. (no CVSS)
- [CVE-2000-1151](https://cve.now/CVE-2000-1151.md): Baxter IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL. (no CVSS)
- [CVE-2000-1152](https://cve.now/CVE-2000-1152.md): Browser IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL. (no CVSS)
- [CVE-2000-1153](https://cve.now/CVE-2000-1153.md): PostMaster 1.0 in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL. (no CVSS)
- [CVE-2000-1154](https://cve.now/CVE-2000-1154.md): RHConsole in RobinHood 1.1 web server in BeOS r5 pro and earlier allows remote attackers to cause a denial of service via long HTTP request. (no CVSS)
- [CVE-2000-1155](https://cve.now/CVE-2000-1155.md): RHDaemon in RobinHood 1.1 web server in BeOS r5 pro and earlier allows remote attackers to cause a denial of service via long HTTP request. (no CVSS)
- [CVE-2000-1156](https://cve.now/CVE-2000-1156.md): StarOffice 5.2 follows symlinks and sets world-readable permissions for the /tmp/soffice.tmp directory, which allows a local user to read fi (no CVSS)
- [CVE-2000-1157](https://cve.now/CVE-2000-1157.md): Buffer overflow in NAI Sniffer Agent allows remote attackers to execute arbitrary commands via a long SNMP community name. (no CVSS)
- [CVE-2000-1158](https://cve.now/CVE-2000-1158.md): NAI Sniffer Agent uses base64 encoding for authentication, which allows attackers to sniff the network and easily decrypt usernames and pass (no CVSS)
- [CVE-2000-1159](https://cve.now/CVE-2000-1159.md): NAI Sniffer Agent allows remote attackers to gain privileges on the agent by sniffing the initial UDP authentication packets and spoofing co (no CVSS)
- [CVE-2000-1160](https://cve.now/CVE-2000-1160.md): NAI Sniffer Agent allows remote attackers to cause a denial of service (crash) by sending a large number of login requests. (no CVSS)
- [CVE-2000-1161](https://cve.now/CVE-2000-1161.md): The installation of AdCycle banner management system leaves the build.cgi program in a web-accessible directory, which allows remote attacke (no CVSS)
- [CVE-2000-1168](https://cve.now/CVE-2000-1168.md): IBM HTTP Server 1.3.6 (based on Apache) allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a l (no CVSS)
- [CVE-2000-1172](https://cve.now/CVE-2000-1172.md): Buffer overflow in Gaim 0.10.3 and earlier using the OSCAR protocol allows remote attackers to conduct a denial of service and possibly exec (no CVSS)
- [CVE-2000-1173](https://cve.now/CVE-2000-1173.md): Microsys CyberPatrol uses weak encryption (trivial encoding) for credit card numbers and uses no encryption for the remainder of the informa (no CVSS)
- [CVE-2000-1175](https://cve.now/CVE-2000-1175.md): Buffer overflow in Koules 1.4 allows local users to execute arbitrary commands via a long command line argument. (no CVSS)
- [CVE-2000-1176](https://cve.now/CVE-2000-1176.md): Directory traversal vulnerability in YaBB search.pl CGI script allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2000-1177](https://cve.now/CVE-2000-1177.md): bb-hist.sh, bb-histlog.sh, bb-hostsvc.sh, bb-rep.sh, bb-replog.sh, and bb-ack.sh in Big Brother (BB) before 1.5d3 allows remote attackers to (no CVSS)
- [CVE-2000-1183](https://cve.now/CVE-2000-1183.md): Buffer overflow in socks5 server on Linux allows attackers to execute arbitrary commands via a long connection request. (no CVSS)
- [CVE-2000-1185](https://cve.now/CVE-2000-1185.md): The telnet proxy in RideWay PN proxy server allows remote attackers to cause a denial of service via a flood of connections that contain mal (no CVSS)
- [CVE-2000-1186](https://cve.now/CVE-2000-1186.md): Buffer overflow in phf CGI program allows remote attackers to execute arbitrary commands by specifying a large number of arguments and inclu (no CVSS)
- [CVE-2000-1188](https://cve.now/CVE-2000-1188.md): Directory traversal vulnerability in Quikstore shopping cart program allows remote attackers to read arbitrary files via a .. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2000-12-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.