CVEs published January 22, 2001
232 CVEs were published on January 22, 2001: 0 critical, 0 high.
- Published
- 232
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 232
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 232
- CVE-2000-0048get_it program in Corel Linux Update allows local users to gain root access by specifying an alternate PATH for the cp program.
- CVE-2000-0080AIX techlibss allows local users to overwrite files via a symlink attack.
- CVE-2000-0111The RightFax web client uses predictable session numbers, which allows remote attackers to hijack user sessions.
- CVE-2000-0252The dansie shopping cart application cart.pl allows remote attackers to execute commands via a shell metacharacters in a form variable.
- CVE-2000-0253The dansie shopping cart application cart.pl allows remote attackers to modify sensitive purchase information via hidden form fields.
- CVE-2000-0254The dansie shopping cart application cart.pl allows remote attackers to obtain the shopping cart database and configuration information via
- CVE-2000-0255The Nbase-Xyplex EdgeBlaster router allows remote attackers to cause a denial of service via a scan for the FormMail CGI program.
- CVE-2000-0276BeOS 4.5 and 5.0 allow local users to cause a denial of service via malformed direct system calls using interrupt 37.
- CVE-2000-0278The SalesLogix Eviewer allows remote attackers to cause a denial of service by accessing the URL for the slxweb.dll administration program,
- CVE-2000-0283The default installation of IRIX Performance Copilot allows remote attackers to access sensitive system information via the pmcd daemon.
- CVE-2000-0287The BizDB CGI script bizdb-search.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the dbname parameter
- CVE-2000-0292The Adtran MX2800 M13 Multiplexer allows remote attackers to cause a denial of service via a ping flood to the Ethernet interface, which cau
- CVE-2000-0296fcheck allows local users to gain privileges by embedding shell metacharacters into file names that are processed by fcheck.
- CVE-2000-0341ATRIUM Cassandra NNTP Server 1.10 allows remote attackers to cause a denial of service via a long login name.
- CVE-2000-0488Buffer overflow in ITHouse mail server 1.04 allows remote attackers to execute arbitrary commands via a long RCPT TO mail command.
- CVE-2000-0498Unify eWave ServletExec allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension i
- CVE-2000-0523Buffer overflow in the logging feature of EServ 2.9.2 and earlier allows an attacker to execute arbitrary commands via a long MKD command.
- CVE-2000-0542Tigris remote access server before 11.5.4.22 does not properly record Radius accounting information when a user fails the initial login auth
- CVE-2000-0565SmartFTP Daemon 0.2 allows a local user to access arbitrary files by uploading and specifying an alternate user configuration file via a ..
- CVE-2000-0672The default configuration of Jakarta Tomcat does not restrict access to the /admin context, which allows remote attackers to read arbitrary
- CVE-2000-0679The CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server to force the client to create arbitrary
- CVE-2000-0698Minicom 1.82.1 and earlier on some Linux systems allows local users to create arbitrary files owned by the uucp user via a symlink attack.
- CVE-2000-0702The net.init rc script in HP-UX 11.00 (S008net.init) allows local users to overwrite arbitrary files via a symlink attack that points from /
- CVE-2000-0716WorldClient email client in MDaemon 2.8 includes the session ID in the referer field of an HTTP request when the user clicks on a URL, which
- CVE-2000-0729FreeBSD 5.x, 4.x, and 3.x allows local users to cause a denial of service by executing a program with a malformed ELF image header.
- CVE-2000-0732Worm HTTP server allows remote attackers to cause a denial of service via a long URL.
- CVE-2000-0738WebShield SMTP 4.5 allows remote attackers to cause a denial of service by sending e-mail with a From: address that has a .
- CVE-2000-0749Buffer overflow in the Linux binary compatibility module in FreeBSD 3.x through 5.x allows local users to gain root privileges via long file
- CVE-2000-0762The default installation of eTrust Access Control (formerly SeOS) uses a default encryption key, which allows remote attackers to spoof the
- CVE-2000-0764Intel Express 500 series switches allow a remote attacker to cause a denial of service via a malformed IP packet.
- CVE-2000-0766Buffer overflow in vqSoft vqServer 1.4.49 allows remote attackers to cause a denial of service or possibly gain privileges via a long HTTP G
- CVE-2000-0783Watchguard Firebox II allows remote attackers to cause a denial of service by sending a malformed URL to the authentication service on port
- CVE-2000-0804Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to bypass the directionality check via fragmented TCP connection reques
- CVE-2000-0805Check Point VPN-1/FireWall-1 4.1 and earlier improperly retransmits encapsulated FWS packets, even if they do not come from a valid FWZ clie
- CVE-2000-0806The inter-module authentication mechanism (fwa1) in Check Point VPN-1/FireWall-1 4.1 and earlier may allow remote attackers to conduct a den
- CVE-2000-0807The OPSEC communications authentication mechanism (fwn1) in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to spoof co
- CVE-2000-0808The seed generation mechanism in the inter-module S/Key authentication mechanism in Check Point VPN-1/FireWall-1 4.1 and earlier allows remo
- CVE-2000-0809Buffer overflow in Getkey in the protocol checker in the inter-module communication mechanism in Check Point VPN-1/FireWall-1 4.1 and earlie
- CVE-2000-0810Auction Weaver 1.0 through 1.04 does not properly validate the names of form fields, which allows remote attackers to delete arbitrary files
- CVE-2000-0811Auction Weaver 1.0 through 1.04 allows remote attackers to read arbitrary files via a ..
- CVE-2000-0813Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to redirect FTP connections to other servers ("FTP Bounce") via invalid
- CVE-2000-0824The unsetenv function in glibc 2.1.1 does not properly unset an environmental variable if the variable is provided twice to a program, which
- CVE-2000-0834The Windows 2000 telnet client attempts to perform NTLM authentication by default, which allows remote attackers to capture and replay the N
- CVE-2000-0837FTP Serv-U 2.5e allows remote attackers to cause a denial of service by sending a large number of null bytes.
- CVE-2000-0844Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attacke
- CVE-2000-0846Buffer overflow in Darxite 0.4 and earlier allows a remote attacker to execute arbitrary commands via a long username or password.
- CVE-2000-0847Buffer overflow in University of Washington c-client library (used by pine and other programs) allows remote attackers to execute arbitrary
- CVE-2000-0848Buffer overflow in IBM WebSphere web application server (WAS) allows remote attackers to execute arbitrary commands via a long Host: reques
- CVE-2000-0849Race condition in Microsoft Windows Media server allows remote attackers to cause a denial of service in the Windows Media Unicast Service v
- CVE-2000-0850Netegrity SiteMinder before 4.11 allows remote attackers to bypass its authentication mechanism by appending "$/FILENAME.ext" (where ext is
- CVE-2000-0851Buffer overflow in the Still Image Service in Windows 2000 allows local users to gain additional privileges via a long WM_USER message, aka
- CVE-2000-0852Multiple buffer overflows in eject on FreeBSD and possibly other OSes allows local users to gain root privileges.
- CVE-2000-0853YaBB Bulletin Board 9.1.2000 allows remote attackers to read arbitrary files via a ..
- CVE-2000-0858Vulnerability in Microsoft Windows NT 4.0 allows remote attackers to cause a denial of service in IIS by sending it a series of malformed re
- CVE-2000-0860The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary files by setting hidden form fields whose names
- CVE-2000-0861Mailman 1.1 allows list administrators to execute arbitrary commands via shell metacharacters in the %(listname) macro expansion.
- CVE-2000-0862Vulnerability in an administrative interface utility for Allaire Spectra 1.0.1 allows remote attackers to read and modify sensitive configur
- CVE-2000-0863Buffer overflow in listmanager earlier than 2.105.1 allows local users to gain additional privileges.
- CVE-2000-0864Race condition in the creation of a Unix domain socket in GNOME esound 0.2.19 and earlier allows a local user to change the permissions of a
- CVE-2000-0865Buffer overflow in dvtermtype in Tridia Double Vision 3.07.00 allows local users to gain root privileges via a long terminal type argument.
- CVE-2000-0867Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, which allows local users to gain root privile
- CVE-2000-0868The default configuration of Apache 1.3.12 in SuSE Linux 6.4 allows remote attackers to read source code for CGI scripts by replacing the /c
- CVE-2000-0869The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbitrary directories via
- CVE-2000-0870Buffer overflow in EFTP allows remote attackers to cause a denial of service via a long string.
- CVE-2000-0871Buffer overflow in EFTP allows remote attackers to cause a denial of service by sending a string that does not contain a newline, then disco
- CVE-2000-0873netstat in AIX 4.x.x does not properly restrict access to the -Zi option, which allows local users to clear network interface statistics and
- CVE-2000-0878The mailto CGI script allows remote attacker to execute arbitrary commands via shell metacharacters in the emailadd form field.
- CVE-2000-0883The default configuration of mod_perl for Apache as installed on Mandrake Linux 6.1 through 7.1 sets the /perl/ directory to be browseable,
- CVE-2000-0884IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed UR
- CVE-2000-0886IIS 5.0 allows remote attackers to execute arbitrary commands via a malformed request for an executable file whose name is appended with ope
- CVE-2000-0887named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making a compressed zone transfer (ZXFR) request
- CVE-2000-0888named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by sending an SRV record to the server, aka the "srv
- CVE-2000-0900Directory traversal vulnerability in ssi CGI program in thttpd 2.19 and earlier allows remote attackers to read arbitrary files via a "%2e%2
- CVE-2000-0901Format string vulnerability in screen 3.9.5 and earlier allows local users to gain root privileges via format characters in the vbell_msg in
- CVE-2000-0908BrowseGate 2.80 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long Authorization or Refer
- CVE-2000-0909Buffer overflow in the automatic mail checking component of Pine 4.21 and earlier allows remote attackers to execute arbitrary commands via
- CVE-2000-0910Horde library 1.02 allows attackers to execute arbitrary commands via shell metacharacters in the "from" address.
- CVE-2000-0911IMP 2.2 and earlier allows attackers to read and delete arbitrary files by modifying the attachment_name hidden form variable, which causes
- CVE-2000-0912MultiHTML CGI script allows remote attackers to read arbitrary files and possibly execute arbitrary commands by specifying the file name to
- CVE-2000-0913mod_rewrite in Apache 1.3.12 and earlier allows remote attackers to read arbitrary files if a RewriteRule directive is expanded to include a
- CVE-2000-0914OpenBSD 2.6 and earlier allows remote attackers to cause a denial of service by flooding the server with ARP requests.
- CVE-2000-0915fingerd in FreeBSD 4.1.1 allows remote attackers to read arbitrary files by specifying the target file name instead of a regular user name.
- CVE-2000-0917Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands.
- CVE-2000-0919Directory traversal vulnerability in PHPix Photo Album 1.0.2 and earlier allows remote attackers to read arbitrary files via a ..
- CVE-2000-0920Directory traversal vulnerability in BOA web server 0.94.8.2 and earlier allows remote attackers to read arbitrary files via a modified ..
- CVE-2000-0921Directory traversal vulnerability in Hassan Consulting shop.cgi shopping cart program allows remote attackers to read arbitrary files via a
- CVE-2000-0922Directory traversal vulnerability in Bytes Interactive Web Shopper shopping cart program (shopper.cgi) 2.0 and earlier allows remote attacke
- CVE-2000-0923authenticate.cgi CGI program in Aplio PRO allows remote attackers to execute arbitrary commands via shell metacharacters in the password par
- CVE-2000-0924Directory traversal vulnerability in search.cgi CGI script in Armada Master Index allows remote attackers to read arbitrary files via a ..
- CVE-2000-0925The default installation of SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) installs the _private directory with world readable permiss
- CVE-2000-0926SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) allows remote attackers to modify price information by changing the "Price" hidden form
- CVE-2000-0928WQuinn QuotaAdvisor 4.1 allows users to list directories and files by running a report on the targeted shares.
- CVE-2000-0929Microsoft Windows Media Player 7 allows attackers to cause a denial of service in RTF-enabled email clients via an embedded OCX control that
- CVE-2000-0930Pegasus Mail 3.12 allows remote attackers to read arbitrary files via an embedded URL that calls the mailto: protocol with a -F switch.
- CVE-2000-0932MAILsweeper for SMTP 3.x does not properly handle corrupt CDA documents in a ZIP file and hangs, which allows remote attackers to cause a de
- CVE-2000-0933The Input Method Editor (IME) in the Simplified Chinese version of Windows 2000 does not disable access to privileged functionality that sho
- CVE-2000-0934Glint in Red Hat Linux 5.2 allows local users to overwrite arbitrary files and cause a denial of service via a symlink attack.
- CVE-2000-0935Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows local users to overwrite arbitrary files via a symlink attack on the cgi.log file
- CVE-2000-0936Samba Web Administration Tool (SWAT) in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, which allows local us
- CVE-2000-0937Samba Web Administration Tool (SWAT) in Samba 2.0.7 does not log login attempts in which the username is correct but the password is wrong,
- CVE-2000-0938Samba Web Administration Tool (SWAT) in Samba 2.0.7 supplies a different error message when a valid username is provided versus an invalid n
- CVE-2000-0941Kootenay Web KW Whois 1.0 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the "whois" paramete
- CVE-2000-0942The CiWebHitsFile component in Microsoft Indexing Services for Windows 2000 allows remote attackers to conduct a cross site scripting (CSS)
- CVE-2000-0943Buffer overflow in bftp daemon (bftpd) 1.0.11 allows remote attackers to cause a denial of service and possibly execute arbitrary commands v
- CVE-2000-0944CGI Script Center News Update 1.1 does not properly validate the original news administration password during a password change operation, w
- CVE-2000-0946Compaq Easy Access Keyboard software 1.3 does not properly disable access to custom buttons when the screen is locked, which could allow an
- CVE-2000-0947Format string vulnerability in cfd daemon in GNU CFEngine before 1.6.0a11 allows attackers to execute arbitrary commands via format characte
- CVE-2000-0948GnoRPM before 0.95 allows local users to modify arbitrary files via a symlink attack.
- CVE-2000-0949Heap overflow in savestr function in LBNL traceroute 1.4a5 and earlier allows a local user to execute arbitrary commands via the -g option.
- CVE-2000-0951A misconfiguration in IIS 5.0 with Index Server enabled and the Index property set allows remote attackers to list directories in the web ro
- CVE-2000-0952global.cgi CGI program in Global 3.55 and earlier on NetBSD allows remote attackers to execute arbitrary commands via shell metacharacters.
- CVE-2000-0953Shambala Server 4.5 allows remote attackers to cause a denial of service by opening then closing a connection.
- CVE-2000-0956cyrus-sasl before 1.5.24 in Red Hat Linux 7.0 does not properly verify the authorization for a local user, which could allow the users to by
- CVE-2000-0957The pluggable authentication module for mysql (pam_mysql) before 0.4.7 does not properly cleanse user input when constructing SQL statements
- CVE-2000-0958HotJava Browser 3.0 allows remote attackers to access the DOM of a web page by opening a javascript: URL in a named window.
- CVE-2000-0959glibc2 does not properly clear the LD_DEBUG_OUTPUT and LD_DEBUG environmental variables when a program is spawned from a setuid program, whi
- CVE-2000-0960The POP3 server in Netscape Messaging Server 4.15p1 generates different error messages for incorrect user names versus incorrect passwords,
- CVE-2000-0961Buffer overflow in IMAP server in Netscape Messaging Server 4.15 Patch 2 allows local users to execute arbitrary commands via a long LIST co
- CVE-2000-0962The IPSEC implementation in OpenBSD 2.7 does not properly handle empty AH/ESP packets, which allows remote attackers to cause a denial of se
- CVE-2000-0965The NSAPI plugins for TGA and the Java Servlet proxy in HP-UX VVOS 10.24 and 11.04 allows an attacker to cause a denial of service (high CPU
- CVE-2000-0966Buffer overflows in lpspooler in the fileset PrinterMgmt.LP-SPOOL of HP-UX 11.0 and earlier allows local users to gain privileges.
- CVE-2000-0967PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands by triggering
- CVE-2000-0968Buffer overflow in Half Life dedicated server before build 3104 allows remote attackers to execute arbitrary commands via a long rcon comman
- CVE-2000-0969Format string vulnerability in Half Life dedicated server build 3104 and earlier allows remote attackers to execute arbitrary commands by in
- CVE-2000-0970IIS 4.0 and 5.0 .ASP pages send the same Session ID cookie for secure and insecure web sessions, which could allow remote attackers to hijac
- CVE-2000-0972HP-UX 11.00 crontab allows local users to read arbitrary files via the -e option by creating a symlink to the target file during the crontab
- CVE-2000-0973Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbitrary commands by fo
- CVE-2000-0974GnuPG (gpg) 1.0.3 does not properly check all signatures of a file containing multiple documents, which allows an attacker to modify content
- CVE-2000-0975Directory traversal vulnerability in apexec.pl in Anaconda Foundation Directory allows remote attackers to read arbitrary files via a ..
- CVE-2000-0977mailfile.cgi CGI program in MailFile 1.10 allows remote attackers to read arbitrary files by specifying the target file name in the "filenam
- CVE-2000-0978bbd server in Big Brother System and Network Monitor before 1.5c2 allows remote attackers to execute arbitrary commands via the "&" shell me
- CVE-2000-0979File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows
- CVE-2000-0980NMPI (Name Management Protocol on IPX) listener in Microsoft NWLink does not properly filter packets from a broadcast address, which allows
- CVE-2000-0981MySQL Database Engine uses a weak authentication method which leaks information that could be used by a remote attacker to recover the passw
- CVE-2000-0982Internet Explorer before 5.5 forwards cached user credentials for a secure web site to insecure pages on the same web site, which could allo
- CVE-2000-0983Microsoft NetMeeting with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service (CPU utilization) via a sequen
- CVE-2000-0984The HTTP server in Cisco IOS 12.0 through 12.1 allows local users to cause a denial of service (crash and reload) via a URL containing a "?/
- CVE-2000-0989Buffer overflow in Intel InBusiness eMail Station 1.04.87 POP service allows remote attackers to cause a denial of service and possibly exec
- CVE-2000-0990cmd5checkpw 0.21 and earlier allows remote attackers to cause a denial of service via an "SMTP AUTH" command with an unknown username.
- CVE-2000-0991Buffer overflow in Hilgraeve, Inc.
- CVE-2000-0992Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a ..
- CVE-2000-0993Format string vulnerability in pw_error function in BSD libutil library allows local users to gain root privileges via a malformed password
- CVE-2000-0994Format string vulnerability in OpenBSD fstat program (and possibly other BSD-based operating systems) allows local users to gain root privil
- CVE-2000-0995Format string vulnerability in OpenBSD yp_passwd program (and possibly other BSD-based operating systems) allows attackers to gain root priv
- CVE-2000-0996Format string vulnerability in OpenBSD su program (and possibly other BSD-based operating systems) allows local attackers to gain root privi
- CVE-2000-1000Format string vulnerability in AOL Instant Messenger (AIM) 4.1.2010 allows remote attackers to cause a denial of service and possibly execut
- CVE-2000-1001add_2_basket.asp in Element InstantShop allows remote attackers to modify price information via the "price" hidden form variable.
- CVE-2000-1002POP3 daemon in Stalker CommuniGate Pro 3.3.2 generates different error messages for invalid usernames versus invalid passwords, which allows
- CVE-2000-1003NETBIOS client in Windows 95 and Windows 98 allows a remote attacker to cause a denial of service by changing a file sharing service to retu
- CVE-2000-1004Format string vulnerability in OpenBSD photurisd allows local users to execute arbitrary commands via a configuration file directory name th
- CVE-2000-1005Directory traversal vulnerability in html_web_store.cgi and web_store.cgi CGI programs in eXtropia WebStore allows remote attackers to read
- CVE-2000-1006Microsoft Exchange Server 5.5 does not properly handle a MIME header with a blank charset specified, which allows remote attackers to cause
- CVE-2000-1007I-gear 3.5.7 and earlier does not properly process log entries in which a URL is longer than 255 characters, which allows an attacker to cau
- CVE-2000-1010Format string vulnerability in talkd in OpenBSD and possibly other BSD-based OSes allows remote attackers to execute arbitrary commands via
- CVE-2000-1011Buffer overflow in catopen() function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to gain root privileges via a
- CVE-2000-1014Format string vulnerability in the search97.cgi CGI script in SCO help http server for Unixware 7 allows remote attackers to execute arbitra
- CVE-2000-1016The default configuration of Apache (httpd.conf) on SuSE 6.4 includes an alias for the /usr/doc directory, which allows remote attackers to
- CVE-2000-1018shred 1.0 file wiping utility does not properly open a file for overwriting or flush its buffers, which prevents shred from properly replaci
- CVE-2000-1019Search engine in Ultraseek 3.1 and 3.1.10 (aka Inktomi Search) allows remote attackers to cause a denial of service via a malformed URL.
- CVE-2000-1022The mailguard feature in Cisco Secure PIX Firewall 5.2(2) and earlier does not properly restrict access to SMTP commands, which allows remot
- CVE-2000-1024eWave ServletExec 3.0C and earlier does not restrict access to the UploadServlet Java/JSP servlet, which allows remote attackers to upload f
- CVE-2000-1026Multiple buffer overflows in LBNL tcpdump allow remote attackers to execute arbitrary commands.
- CVE-2000-1027Cisco Secure PIX Firewall 5.2(2) allows remote attackers to determine the real IP address of a target FTP server by flooding the server with
- CVE-2000-1031Buffer overflow in dtterm in HP-UX 11.0 and HP Tru64 UNIX 4.0f through 5.1a allows local users to execute arbitrary code via a long -tn opti
- CVE-2000-1032The client authentication interface for Check Point Firewall-1 4.0 and earlier generates different error messages for invalid usernames vers
- CVE-2000-1034Buffer overflow in the System Monitor ActiveX control in Windows 2000 allows remote attackers to execute arbitrary commands via a long LogFi
- CVE-2000-1036Directory traversal vulnerability in Extent RBS ISP web server allows remote attackers to read sensitive information via a ..
- CVE-2000-1038The web administration interface for IBM AS/400 Firewall allows remote attackers to cause a denial of service via an empty GET request.
- CVE-2000-1040Format string vulnerability in logging function of ypbind 3.3, while running in debug mode, leaks file descriptors and allows an attacker to
- CVE-2000-1041Buffer overflow in ypbind 3.3 possibly allows an attacker to gain root privileges.
- CVE-2000-1042Buffer overflow in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root pri
- CVE-2000-1043Format string vulnerability in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to g
- CVE-2000-1044Format string vulnerability in ypbind-mt in SuSE SuSE-6.2, and possibly other Linux operating systems, allows an attacker to gain root privi
- CVE-2000-1045nss_ldap earlier than 121, when run with nscd (name service caching daemon), allows remote attackers to cause a denial of service via a floo
- CVE-2000-1049Allaire JRun 3.0 http servlet server allows remote attackers to cause a denial of service via a URL that contains a long string of "." chara
- CVE-2000-1050Allaire JRun 3.0 http servlet server allows remote attackers to directly access the WEB-INF directory via a URL request that contains an ext
- CVE-2000-1051Directory traversal vulnerability in Allaire JRun 2.3 server allows remote attackers to read arbitrary files via the SSIFilter servlet.
- CVE-2000-1054Buffer overflow in CSAdmin module in CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to cause a denial of service and poss
- CVE-2000-1055Buffer overflow in CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to cause a denial of service and possibly execute arbit
- CVE-2000-1056CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to bypass LDAP authentication on the server if the LDAP server allows null
- CVE-2000-1057Vulnerabilities in database configuration scripts in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows local users to gain privi
- CVE-2000-1058Buffer overflow in OverView5 CGI program in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows remote attackers to cause a denial
- CVE-2000-1059The default configuration of the Xsession file in Mandrake Linux 7.1 and 7.0 bypasses the Xauthority access control mechanism with an "xhost
- CVE-2000-1060The default configuration of XFCE 3.5.1 bypasses the Xauthority access control mechanism with an "xhost + localhost" command in the xinitrc
- CVE-2000-1061Microsoft Virtual Machine (VM) in Internet Explorer 4.x and 5.x allows an unsigned applet to create and use ActiveX controls, which allows a
- CVE-2000-1068pollit.cgi in Poll It 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the poll_options parameter.
- CVE-2000-1069pollit.cgi in Poll It 2.01 and earlier allows remote attackers to access administrative functions without knowing the real password by speci
- CVE-2000-1070pollit.cgi in Poll It 2.01 and earlier uses data files that are located under the web document root, which allows remote attackers to access
- CVE-2000-1071The GUI installation for iCal 2.1 Patch 2 disables access control for the X server using an "xhost +" command, which allows remote attackers
- CVE-2000-1072iCal 2.1 Patch 2 installs many files with world-writeable permissions, which allows local users to modify the iCal configuration and execute
- CVE-2000-1073csstart program in iCal 2.1 Patch 2 searches for the cshttpd program in the current working directory, which allows local users to gain root
- CVE-2000-1074csstart program in iCal 2.1 Patch 2 uses relative pathnames to install the libsocket and libnsl libraries, which could allow the icsuser acc
- CVE-2000-1077Buffer overflow in the SHTML logging functionality of iPlanet Web Server 4.x allows remote attackers to execute arbitrary commands via a lon
- CVE-2000-1080Quake 1 (quake1) and ProQuake 1.01 and earlier allow remote attackers to cause a denial of service via a malformed (empty) UDP packet.
- CVE-2000-1089Buffer overflow in Microsoft Phone Book Service allows local users to execute arbitrary commands, aka the "Phone Book Service Buffer Overflo
- CVE-2000-1094Buffer overflow in AOL Instant Messenger (AIM) before 4.3.2229 allows remote attackers to execute arbitrary commands via a "buddyicon" comma
- CVE-2000-1095modprobe in the modutils 2.3.x package on Linux systems allows a local user to execute arbitrary commands via shell metacharacters.
- CVE-2000-1096crontab by Paul Vixie uses predictable file names for a temporary file and does not properly ensure that the file is owned by the user execu
- CVE-2000-1097The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via a long username in the authenticatio
- CVE-2000-1099Java Runtime Environment in Java Development Kit (JDK) 1.2.2_05 and earlier can allow an untrusted Java class to call into a disallowed clas
- CVE-2000-1106Trend Micro InterScan VirusWall creates an "Intscan" share to the "InterScan" directory with permissions that grant Full Control permissions
- CVE-2000-1107in.identd ident server in SuSE Linux 6.x and 7.0 allows remote attackers to cause a denial of service via a long request, which causes the s
- CVE-2000-1112Microsoft Windows Media Player 7 executes scripts in custom skin (.WMS) files, which could allow remote attackers to gain privileges via a s
- CVE-2000-1113Buffer overflow in Microsoft Windows Media Player allows remote attackers to execute arbitrary commands via a malformed Active Stream Redire
- CVE-2000-1115Buffer overflow in remote web administration component (webprox.dll) of 602Pro LAN SUITE before 2000.0.1.33 allows remote attackers to cause
- CVE-2000-1120Buffer overflow in digest command in IBM AIX 4.3.x and earlier allows local users to execute arbitrary commands.
- CVE-2000-1131Bill Kendrick web site guestbook (GBook) allows remote attackers to execute arbitrary commands via shell metacharacters in the _MAILTO form
- CVE-2000-1132DCForum cgforum.cgi CGI script allows remote attackers to read arbitrary files, and delete the program itself, via a malformed "forum" varia
- CVE-2000-1135fshd (fsh daemon) in Debian GNU/Linux allows local users to overwrite files of other users via a symlink attack.
- CVE-2000-1136elvis-tiny before 1.4-10 in Debian GNU/Linux, and possibly other Linux operating systems, allows local users to overwrite files of other use
- CVE-2000-1137GNU ed before 0.2-18.1 allows local users to overwrite the files of other users via a symlink attack.
- CVE-2000-1139The installation of Microsoft Exchange 2000 before Rev.
- CVE-2000-1140Recourse ManTrap 1.6 does not properly hide processes from attackers, which could allow attackers to determine that they are in a honeypot s
- CVE-2000-1141Recourse ManTrap 1.6 modifies the kernel so that ".." does not appear in the /proc listing, which allows attackers to determine that they ar
- CVE-2000-1142Recourse ManTrap 1.6 generates an error when an attacker cd's to /proc/self/cwd and executes the pwd command, which allows attackers to dete
- CVE-2000-1143Recourse ManTrap 1.6 hides the first 4 processes that run on a Solaris system, which allows attackers to determine that they are in a honeyp
- CVE-2000-1144Recourse ManTrap 1.6 sets up a chroot environment to hide the fact that it is running, but the inode number for the resulting "/" file syste
- CVE-2000-1145Recourse ManTrap 1.6 allows attackers who have gained root access to use utilities such as crash or fsdb to read /dev/mem and raw disk devic
- CVE-2000-1146Recourse ManTrap 1.6 allows attackers to cause a denial of service via a sequence of commands that navigate into and out of the /proc/self d
- CVE-2000-1148The installation of VolanoChatPro chat server sets world-readable permissions for its configuration file and stores the server administrator
- CVE-2000-1149Buffer overflow in RegAPI.DLL used by Windows NT 4.0 Terminal Server allows remote attackers to execute arbitrary commands via a long userna
- CVE-2000-1162ghostscript before 5.10-16 allows local users to overwrite files of other users via a symlink attack.
- CVE-2000-1163ghostscript before 5.10-16 uses an empty LD_RUN_PATH environmental variable to find libraries in the current directory, which could allow lo
- CVE-2000-1167ppp utility in FreeBSD 4.1.1 and earlier does not properly restrict access as specified by the "nat deny_incoming" command, which allows rem
- CVE-2000-1169OpenSSH SSH client before 2.3.0 does not properly disable X11 or agent forwarding, which could allow a malicious SSH server to gain access t
- CVE-2000-1178Joe text editor follows symbolic links when creating a rescue copy called DEADJOE during an abnormal exit, which allows local users to overw
- CVE-2000-1179Netopia ISDN Router 650-ST before 4.3.5 allows remote attackers to read system logs without authentication by directly connecting to the log
- CVE-2000-1181Real Networks RealServer 7 and earlier allows remote attackers to obtain portions of RealServer's memory contents, possibly including sensit
- CVE-2000-1182WatchGuard Firebox II allows remote attackers to cause a denial of service by flooding the Firebox with a large number of FTP or SMTP reques
- CVE-2000-1184telnetd in FreeBSD 4.2 and earlier, and possibly other operating systems, allows remote attackers to cause a denial of service by specifying
- CVE-2000-1187Buffer overflow in the HTML parser for Netscape 4.75 and earlier allows remote attackers to execute arbitrary commands via a long password v
- CVE-2000-1189Buffer overflow in pam_localuser PAM module in Red Hat Linux 7.x and 6.x allows attackers to gain privileges.