# CVEs published 2001-01-22

232 CVEs were published on January 22, 2001: 0 critical, 0 high. Days are UTC.

- [CVE-2000-0048](https://cve.now/CVE-2000-0048.md): get\_it program in Corel Linux Update allows local users to gain root access by specifying an alternate PATH for the cp program. (no CVSS)
- [CVE-2000-0080](https://cve.now/CVE-2000-0080.md): AIX techlibss allows local users to overwrite files via a symlink attack. (no CVSS)
- [CVE-2000-0111](https://cve.now/CVE-2000-0111.md): The RightFax web client uses predictable session numbers, which allows remote attackers to hijack user sessions. (no CVSS)
- [CVE-2000-0252](https://cve.now/CVE-2000-0252.md): The dansie shopping cart application cart.pl allows remote attackers to execute commands via a shell metacharacters in a form variable. (no CVSS)
- [CVE-2000-0253](https://cve.now/CVE-2000-0253.md): The dansie shopping cart application cart.pl allows remote attackers to modify sensitive purchase information via hidden form fields. (no CVSS)
- [CVE-2000-0254](https://cve.now/CVE-2000-0254.md): The dansie shopping cart application cart.pl allows remote attackers to obtain the shopping cart database and configuration information via (no CVSS)
- [CVE-2000-0255](https://cve.now/CVE-2000-0255.md): The Nbase-Xyplex EdgeBlaster router allows remote attackers to cause a denial of service via a scan for the FormMail CGI program. (no CVSS)
- [CVE-2000-0276](https://cve.now/CVE-2000-0276.md): BeOS 4.5 and 5.0 allow local users to cause a denial of service via malformed direct system calls using interrupt 37. (no CVSS)
- [CVE-2000-0278](https://cve.now/CVE-2000-0278.md): The SalesLogix Eviewer allows remote attackers to cause a denial of service by accessing the URL for the slxweb.dll administration program, (no CVSS)
- [CVE-2000-0283](https://cve.now/CVE-2000-0283.md): The default installation of IRIX Performance Copilot allows remote attackers to access sensitive system information via the pmcd daemon. (no CVSS)
- [CVE-2000-0287](https://cve.now/CVE-2000-0287.md): The BizDB CGI script bizdb-search.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the dbname parameter (no CVSS)
- [CVE-2000-0292](https://cve.now/CVE-2000-0292.md): The Adtran MX2800 M13 Multiplexer allows remote attackers to cause a denial of service via a ping flood to the Ethernet interface, which cau (no CVSS)
- [CVE-2000-0296](https://cve.now/CVE-2000-0296.md): fcheck allows local users to gain privileges by embedding shell metacharacters into file names that are processed by fcheck. (no CVSS)
- [CVE-2000-0341](https://cve.now/CVE-2000-0341.md): ATRIUM Cassandra NNTP Server 1.10 allows remote attackers to cause a denial of service via a long login name. (no CVSS)
- [CVE-2000-0488](https://cve.now/CVE-2000-0488.md): Buffer overflow in ITHouse mail server 1.04 allows remote attackers to execute arbitrary commands via a long RCPT TO mail command. (no CVSS)
- [CVE-2000-0498](https://cve.now/CVE-2000-0498.md): Unify eWave ServletExec allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension i (no CVSS)
- [CVE-2000-0523](https://cve.now/CVE-2000-0523.md): Buffer overflow in the logging feature of EServ 2.9.2 and earlier allows an attacker to execute arbitrary commands via a long MKD command. (no CVSS)
- [CVE-2000-0542](https://cve.now/CVE-2000-0542.md): Tigris remote access server before 11.5.4.22 does not properly record Radius accounting information when a user fails the initial login auth (no CVSS)
- [CVE-2000-0565](https://cve.now/CVE-2000-0565.md): SmartFTP Daemon 0.2 allows a local user to access arbitrary files by uploading and specifying an alternate user configuration file via a .. (no CVSS)
- [CVE-2000-0672](https://cve.now/CVE-2000-0672.md): The default configuration of Jakarta Tomcat does not restrict access to the /admin context, which allows remote attackers to read arbitrary (no CVSS)
- [CVE-2000-0679](https://cve.now/CVE-2000-0679.md): The CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server to force the client to create arbitrary (no CVSS)
- [CVE-2000-0698](https://cve.now/CVE-2000-0698.md): Minicom 1.82.1 and earlier on some Linux systems allows local users to create arbitrary files owned by the uucp user via a symlink attack. (no CVSS)
- [CVE-2000-0702](https://cve.now/CVE-2000-0702.md): The net.init rc script in HP-UX 11.00 (S008net.init) allows local users to overwrite arbitrary files via a symlink attack that points from / (no CVSS)
- [CVE-2000-0716](https://cve.now/CVE-2000-0716.md): WorldClient email client in MDaemon 2.8 includes the session ID in the referer field of an HTTP request when the user clicks on a URL, which (no CVSS)
- [CVE-2000-0729](https://cve.now/CVE-2000-0729.md): FreeBSD 5.x, 4.x, and 3.x allows local users to cause a denial of service by executing a program with a malformed ELF image header. (no CVSS)
- [CVE-2000-0732](https://cve.now/CVE-2000-0732.md): Worm HTTP server allows remote attackers to cause a denial of service via a long URL. (no CVSS)
- [CVE-2000-0738](https://cve.now/CVE-2000-0738.md): WebShield SMTP 4.5 allows remote attackers to cause a denial of service by sending e-mail with a From: address that has a . (no CVSS)
- [CVE-2000-0749](https://cve.now/CVE-2000-0749.md): Buffer overflow in the Linux binary compatibility module in FreeBSD 3.x through 5.x allows local users to gain root privileges via long file (no CVSS)
- [CVE-2000-0762](https://cve.now/CVE-2000-0762.md): The default installation of eTrust Access Control (formerly SeOS) uses a default encryption key, which allows remote attackers to spoof the (no CVSS)
- [CVE-2000-0764](https://cve.now/CVE-2000-0764.md): Intel Express 500 series switches allow a remote attacker to cause a denial of service via a malformed IP packet. (no CVSS)
- [CVE-2000-0766](https://cve.now/CVE-2000-0766.md): Buffer overflow in vqSoft vqServer 1.4.49 allows remote attackers to cause a denial of service or possibly gain privileges via a long HTTP G (no CVSS)
- [CVE-2000-0783](https://cve.now/CVE-2000-0783.md): Watchguard Firebox II allows remote attackers to cause a denial of service by sending a malformed URL to the authentication service on port (no CVSS)
- [CVE-2000-0804](https://cve.now/CVE-2000-0804.md): Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to bypass the directionality check via fragmented TCP connection reques (no CVSS)
- [CVE-2000-0805](https://cve.now/CVE-2000-0805.md): Check Point VPN-1/FireWall-1 4.1 and earlier improperly retransmits encapsulated FWS packets, even if they do not come from a valid FWZ clie (no CVSS)
- [CVE-2000-0806](https://cve.now/CVE-2000-0806.md): The inter-module authentication mechanism (fwa1) in Check Point VPN-1/FireWall-1 4.1 and earlier may allow remote attackers to conduct a den (no CVSS)
- [CVE-2000-0807](https://cve.now/CVE-2000-0807.md): The OPSEC communications authentication mechanism (fwn1) in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to spoof co (no CVSS)
- [CVE-2000-0808](https://cve.now/CVE-2000-0808.md): The seed generation mechanism in the inter-module S/Key authentication mechanism in Check Point VPN-1/FireWall-1 4.1 and earlier allows remo (no CVSS)
- [CVE-2000-0809](https://cve.now/CVE-2000-0809.md): Buffer overflow in Getkey in the protocol checker in the inter-module communication mechanism in Check Point VPN-1/FireWall-1 4.1 and earlie (no CVSS)
- [CVE-2000-0810](https://cve.now/CVE-2000-0810.md): Auction Weaver 1.0 through 1.04 does not properly validate the names of form fields, which allows remote attackers to delete arbitrary files (no CVSS)
- [CVE-2000-0811](https://cve.now/CVE-2000-0811.md): Auction Weaver 1.0 through 1.04 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2000-0813](https://cve.now/CVE-2000-0813.md): Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to redirect FTP connections to other servers ("FTP Bounce") via invalid (no CVSS)
- [CVE-2000-0824](https://cve.now/CVE-2000-0824.md): The unsetenv function in glibc 2.1.1 does not properly unset an environmental variable if the variable is provided twice to a program, which (no CVSS)
- [CVE-2000-0834](https://cve.now/CVE-2000-0834.md): The Windows 2000 telnet client attempts to perform NTLM authentication by default, which allows remote attackers to capture and replay the N (no CVSS)
- [CVE-2000-0837](https://cve.now/CVE-2000-0837.md): FTP Serv-U 2.5e allows remote attackers to cause a denial of service by sending a large number of null bytes. (no CVSS)
- [CVE-2000-0844](https://cve.now/CVE-2000-0844.md): Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attacke (no CVSS)
- [CVE-2000-0846](https://cve.now/CVE-2000-0846.md): Buffer overflow in Darxite 0.4 and earlier allows a remote attacker to execute arbitrary commands via a long username or password. (no CVSS)
- [CVE-2000-0847](https://cve.now/CVE-2000-0847.md): Buffer overflow in University of Washington c-client library (used by pine and other programs) allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2000-0848](https://cve.now/CVE-2000-0848.md): Buffer overflow in IBM WebSphere web application server (WAS) allows remote attackers to execute arbitrary commands via a long Host: reques (no CVSS)
- [CVE-2000-0849](https://cve.now/CVE-2000-0849.md): Race condition in Microsoft Windows Media server allows remote attackers to cause a denial of service in the Windows Media Unicast Service v (no CVSS)
- [CVE-2000-0850](https://cve.now/CVE-2000-0850.md): Netegrity SiteMinder before 4.11 allows remote attackers to bypass its authentication mechanism by appending "$/FILENAME.ext" (where ext is (no CVSS)
- [CVE-2000-0851](https://cve.now/CVE-2000-0851.md): Buffer overflow in the Still Image Service in Windows 2000 allows local users to gain additional privileges via a long WM\_USER message, aka (no CVSS)
- [CVE-2000-0852](https://cve.now/CVE-2000-0852.md): Multiple buffer overflows in eject on FreeBSD and possibly other OSes allows local users to gain root privileges. (no CVSS)
- [CVE-2000-0853](https://cve.now/CVE-2000-0853.md): YaBB Bulletin Board 9.1.2000 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2000-0858](https://cve.now/CVE-2000-0858.md): Vulnerability in Microsoft Windows NT 4.0 allows remote attackers to cause a denial of service in IIS by sending it a series of malformed re (no CVSS)
- [CVE-2000-0860](https://cve.now/CVE-2000-0860.md): The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary files by setting hidden form fields whose names (no CVSS)
- [CVE-2000-0861](https://cve.now/CVE-2000-0861.md): Mailman 1.1 allows list administrators to execute arbitrary commands via shell metacharacters in the %(listname) macro expansion. (no CVSS)
- [CVE-2000-0862](https://cve.now/CVE-2000-0862.md): Vulnerability in an administrative interface utility for Allaire Spectra 1.0.1 allows remote attackers to read and modify sensitive configur (no CVSS)
- [CVE-2000-0863](https://cve.now/CVE-2000-0863.md): Buffer overflow in listmanager earlier than 2.105.1 allows local users to gain additional privileges. (no CVSS)
- [CVE-2000-0864](https://cve.now/CVE-2000-0864.md): Race condition in the creation of a Unix domain socket in GNOME esound 0.2.19 and earlier allows a local user to change the permissions of a (no CVSS)
- [CVE-2000-0865](https://cve.now/CVE-2000-0865.md): Buffer overflow in dvtermtype in Tridia Double Vision 3.07.00 allows local users to gain root privileges via a long terminal type argument. (no CVSS)
- [CVE-2000-0867](https://cve.now/CVE-2000-0867.md): Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, which allows local users to gain root privile (no CVSS)
- [CVE-2000-0868](https://cve.now/CVE-2000-0868.md): The default configuration of Apache 1.3.12 in SuSE Linux 6.4 allows remote attackers to read source code for CGI scripts by replacing the /c (no CVSS)
- [CVE-2000-0869](https://cve.now/CVE-2000-0869.md): The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbitrary directories via (no CVSS)
- [CVE-2000-0870](https://cve.now/CVE-2000-0870.md): Buffer overflow in EFTP allows remote attackers to cause a denial of service via a long string. (no CVSS)
- [CVE-2000-0871](https://cve.now/CVE-2000-0871.md): Buffer overflow in EFTP allows remote attackers to cause a denial of service by sending a string that does not contain a newline, then disco (no CVSS)
- [CVE-2000-0873](https://cve.now/CVE-2000-0873.md): netstat in AIX 4.x.x does not properly restrict access to the -Zi option, which allows local users to clear network interface statistics and (no CVSS)
- [CVE-2000-0878](https://cve.now/CVE-2000-0878.md): The mailto CGI script allows remote attacker to execute arbitrary commands via shell metacharacters in the emailadd form field. (no CVSS)
- [CVE-2000-0883](https://cve.now/CVE-2000-0883.md): The default configuration of mod\_perl for Apache as installed on Mandrake Linux 6.1 through 7.1 sets the /perl/ directory to be browseable, (no CVSS)
- [CVE-2000-0884](https://cve.now/CVE-2000-0884.md): IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed UR (no CVSS)
- [CVE-2000-0886](https://cve.now/CVE-2000-0886.md): IIS 5.0 allows remote attackers to execute arbitrary commands via a malformed request for an executable file whose name is appended with ope (no CVSS)
- [CVE-2000-0887](https://cve.now/CVE-2000-0887.md): named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making a compressed zone transfer (ZXFR) request (no CVSS)
- [CVE-2000-0888](https://cve.now/CVE-2000-0888.md): named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by sending an SRV record to the server, aka the "srv (no CVSS)
- [CVE-2000-0900](https://cve.now/CVE-2000-0900.md): Directory traversal vulnerability in ssi CGI program in thttpd 2.19 and earlier allows remote attackers to read arbitrary files via a "%2e%2 (no CVSS)
- [CVE-2000-0901](https://cve.now/CVE-2000-0901.md): Format string vulnerability in screen 3.9.5 and earlier allows local users to gain root privileges via format characters in the vbell\_msg in (no CVSS)
- [CVE-2000-0908](https://cve.now/CVE-2000-0908.md): BrowseGate 2.80 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long Authorization or Refer (no CVSS)
- [CVE-2000-0909](https://cve.now/CVE-2000-0909.md): Buffer overflow in the automatic mail checking component of Pine 4.21 and earlier allows remote attackers to execute arbitrary commands via (no CVSS)
- [CVE-2000-0910](https://cve.now/CVE-2000-0910.md): Horde library 1.02 allows attackers to execute arbitrary commands via shell metacharacters in the "from" address. (no CVSS)
- [CVE-2000-0911](https://cve.now/CVE-2000-0911.md): IMP 2.2 and earlier allows attackers to read and delete arbitrary files by modifying the attachment\_name hidden form variable, which causes (no CVSS)
- [CVE-2000-0912](https://cve.now/CVE-2000-0912.md): MultiHTML CGI script allows remote attackers to read arbitrary files and possibly execute arbitrary commands by specifying the file name to (no CVSS)
- [CVE-2000-0913](https://cve.now/CVE-2000-0913.md): mod\_rewrite in Apache 1.3.12 and earlier allows remote attackers to read arbitrary files if a RewriteRule directive is expanded to include a (no CVSS)
- [CVE-2000-0914](https://cve.now/CVE-2000-0914.md): OpenBSD 2.6 and earlier allows remote attackers to cause a denial of service by flooding the server with ARP requests. (no CVSS)
- [CVE-2000-0915](https://cve.now/CVE-2000-0915.md): fingerd in FreeBSD 4.1.1 allows remote attackers to read arbitrary files by specifying the target file name instead of a regular user name. (no CVSS)
- [CVE-2000-0917](https://cve.now/CVE-2000-0917.md): Format string vulnerability in use\_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands. (no CVSS)
- [CVE-2000-0919](https://cve.now/CVE-2000-0919.md): Directory traversal vulnerability in PHPix Photo Album 1.0.2 and earlier allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2000-0920](https://cve.now/CVE-2000-0920.md): Directory traversal vulnerability in BOA web server 0.94.8.2 and earlier allows remote attackers to read arbitrary files via a modified .. (no CVSS)
- [CVE-2000-0921](https://cve.now/CVE-2000-0921.md): Directory traversal vulnerability in Hassan Consulting shop.cgi shopping cart program allows remote attackers to read arbitrary files via a (no CVSS)
- [CVE-2000-0922](https://cve.now/CVE-2000-0922.md): Directory traversal vulnerability in Bytes Interactive Web Shopper shopping cart program (shopper.cgi) 2.0 and earlier allows remote attacke (no CVSS)
- [CVE-2000-0923](https://cve.now/CVE-2000-0923.md): authenticate.cgi CGI program in Aplio PRO allows remote attackers to execute arbitrary commands via shell metacharacters in the password par (no CVSS)
- [CVE-2000-0924](https://cve.now/CVE-2000-0924.md): Directory traversal vulnerability in search.cgi CGI script in Armada Master Index allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2000-0925](https://cve.now/CVE-2000-0925.md): The default installation of SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) installs the \_private directory with world readable permiss (no CVSS)
- [CVE-2000-0926](https://cve.now/CVE-2000-0926.md): SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) allows remote attackers to modify price information by changing the "Price" hidden form (no CVSS)
- [CVE-2000-0928](https://cve.now/CVE-2000-0928.md): WQuinn QuotaAdvisor 4.1 allows users to list directories and files by running a report on the targeted shares. (no CVSS)
- [CVE-2000-0929](https://cve.now/CVE-2000-0929.md): Microsoft Windows Media Player 7 allows attackers to cause a denial of service in RTF-enabled email clients via an embedded OCX control that (no CVSS)
- [CVE-2000-0930](https://cve.now/CVE-2000-0930.md): Pegasus Mail 3.12 allows remote attackers to read arbitrary files via an embedded URL that calls the mailto: protocol with a -F switch. (no CVSS)
- [CVE-2000-0932](https://cve.now/CVE-2000-0932.md): MAILsweeper for SMTP 3.x does not properly handle corrupt CDA documents in a ZIP file and hangs, which allows remote attackers to cause a de (no CVSS)
- [CVE-2000-0933](https://cve.now/CVE-2000-0933.md): The Input Method Editor (IME) in the Simplified Chinese version of Windows 2000 does not disable access to privileged functionality that sho (no CVSS)
- [CVE-2000-0934](https://cve.now/CVE-2000-0934.md): Glint in Red Hat Linux 5.2 allows local users to overwrite arbitrary files and cause a denial of service via a symlink attack. (no CVSS)
- [CVE-2000-0935](https://cve.now/CVE-2000-0935.md): Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows local users to overwrite arbitrary files via a symlink attack on the cgi.log file (no CVSS)
- [CVE-2000-0936](https://cve.now/CVE-2000-0936.md): Samba Web Administration Tool (SWAT) in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, which allows local us (no CVSS)
- [CVE-2000-0937](https://cve.now/CVE-2000-0937.md): Samba Web Administration Tool (SWAT) in Samba 2.0.7 does not log login attempts in which the username is correct but the password is wrong, (no CVSS)
- [CVE-2000-0938](https://cve.now/CVE-2000-0938.md): Samba Web Administration Tool (SWAT) in Samba 2.0.7 supplies a different error message when a valid username is provided versus an invalid n (no CVSS)
- [CVE-2000-0941](https://cve.now/CVE-2000-0941.md): Kootenay Web KW Whois 1.0 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the "whois" paramete (no CVSS)
- [CVE-2000-0942](https://cve.now/CVE-2000-0942.md): The CiWebHitsFile component in Microsoft Indexing Services for Windows 2000 allows remote attackers to conduct a cross site scripting (CSS) (no CVSS)
- [CVE-2000-0943](https://cve.now/CVE-2000-0943.md): Buffer overflow in bftp daemon (bftpd) 1.0.11 allows remote attackers to cause a denial of service and possibly execute arbitrary commands v (no CVSS)
- [CVE-2000-0944](https://cve.now/CVE-2000-0944.md): CGI Script Center News Update 1.1 does not properly validate the original news administration password during a password change operation, w (no CVSS)
- [CVE-2000-0946](https://cve.now/CVE-2000-0946.md): Compaq Easy Access Keyboard software 1.3 does not properly disable access to custom buttons when the screen is locked, which could allow an (no CVSS)
- [CVE-2000-0947](https://cve.now/CVE-2000-0947.md): Format string vulnerability in cfd daemon in GNU CFEngine before 1.6.0a11 allows attackers to execute arbitrary commands via format characte (no CVSS)
- [CVE-2000-0948](https://cve.now/CVE-2000-0948.md): GnoRPM before 0.95 allows local users to modify arbitrary files via a symlink attack. (no CVSS)
- [CVE-2000-0949](https://cve.now/CVE-2000-0949.md): Heap overflow in savestr function in LBNL traceroute 1.4a5 and earlier allows a local user to execute arbitrary commands via the -g option. (no CVSS)
- [CVE-2000-0951](https://cve.now/CVE-2000-0951.md): A misconfiguration in IIS 5.0 with Index Server enabled and the Index property set allows remote attackers to list directories in the web ro (no CVSS)
- [CVE-2000-0952](https://cve.now/CVE-2000-0952.md): global.cgi CGI program in Global 3.55 and earlier on NetBSD allows remote attackers to execute arbitrary commands via shell metacharacters. (no CVSS)
- [CVE-2000-0953](https://cve.now/CVE-2000-0953.md): Shambala Server 4.5 allows remote attackers to cause a denial of service by opening then closing a connection. (no CVSS)
- [CVE-2000-0956](https://cve.now/CVE-2000-0956.md): cyrus-sasl before 1.5.24 in Red Hat Linux 7.0 does not properly verify the authorization for a local user, which could allow the users to by (no CVSS)
- [CVE-2000-0957](https://cve.now/CVE-2000-0957.md): The pluggable authentication module for mysql (pam\_mysql) before 0.4.7 does not properly cleanse user input when constructing SQL statements (no CVSS)
- [CVE-2000-0958](https://cve.now/CVE-2000-0958.md): HotJava Browser 3.0 allows remote attackers to access the DOM of a web page by opening a javascript: URL in a named window. (no CVSS)
- [CVE-2000-0959](https://cve.now/CVE-2000-0959.md): glibc2 does not properly clear the LD\_DEBUG\_OUTPUT and LD\_DEBUG environmental variables when a program is spawned from a setuid program, whi (no CVSS)
- [CVE-2000-0960](https://cve.now/CVE-2000-0960.md): The POP3 server in Netscape Messaging Server 4.15p1 generates different error messages for incorrect user names versus incorrect passwords, (no CVSS)
- [CVE-2000-0961](https://cve.now/CVE-2000-0961.md): Buffer overflow in IMAP server in Netscape Messaging Server 4.15 Patch 2 allows local users to execute arbitrary commands via a long LIST co (no CVSS)
- [CVE-2000-0962](https://cve.now/CVE-2000-0962.md): The IPSEC implementation in OpenBSD 2.7 does not properly handle empty AH/ESP packets, which allows remote attackers to cause a denial of se (no CVSS)
- [CVE-2000-0965](https://cve.now/CVE-2000-0965.md): The NSAPI plugins for TGA and the Java Servlet proxy in HP-UX VVOS 10.24 and 11.04 allows an attacker to cause a denial of service (high CPU (no CVSS)
- [CVE-2000-0966](https://cve.now/CVE-2000-0966.md): Buffer overflows in lpspooler in the fileset PrinterMgmt.LP-SPOOL of HP-UX 11.0 and earlier allows local users to gain privileges. (no CVSS)
- [CVE-2000-0967](https://cve.now/CVE-2000-0967.md): PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands by triggering (no CVSS)
- [CVE-2000-0968](https://cve.now/CVE-2000-0968.md): Buffer overflow in Half Life dedicated server before build 3104 allows remote attackers to execute arbitrary commands via a long rcon comman (no CVSS)
- [CVE-2000-0969](https://cve.now/CVE-2000-0969.md): Format string vulnerability in Half Life dedicated server build 3104 and earlier allows remote attackers to execute arbitrary commands by in (no CVSS)
- [CVE-2000-0970](https://cve.now/CVE-2000-0970.md): IIS 4.0 and 5.0 .ASP pages send the same Session ID cookie for secure and insecure web sessions, which could allow remote attackers to hijac (no CVSS)
- [CVE-2000-0972](https://cve.now/CVE-2000-0972.md): HP-UX 11.00 crontab allows local users to read arbitrary files via the -e option by creating a symlink to the target file during the crontab (no CVSS)
- [CVE-2000-0973](https://cve.now/CVE-2000-0973.md): Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbitrary commands by fo (no CVSS)
- [CVE-2000-0974](https://cve.now/CVE-2000-0974.md): GnuPG (gpg) 1.0.3 does not properly check all signatures of a file containing multiple documents, which allows an attacker to modify content (no CVSS)
- [CVE-2000-0975](https://cve.now/CVE-2000-0975.md): Directory traversal vulnerability in apexec.pl in Anaconda Foundation Directory allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2000-0977](https://cve.now/CVE-2000-0977.md): mailfile.cgi CGI program in MailFile 1.10 allows remote attackers to read arbitrary files by specifying the target file name in the "filenam (no CVSS)
- [CVE-2000-0978](https://cve.now/CVE-2000-0978.md): bbd server in Big Brother System and Network Monitor before 1.5c2 allows remote attackers to execute arbitrary commands via the "&" shell me (no CVSS)
- [CVE-2000-0979](https://cve.now/CVE-2000-0979.md): File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows (no CVSS)
- [CVE-2000-0980](https://cve.now/CVE-2000-0980.md): NMPI (Name Management Protocol on IPX) listener in Microsoft NWLink does not properly filter packets from a broadcast address, which allows (no CVSS)
- [CVE-2000-0981](https://cve.now/CVE-2000-0981.md): MySQL Database Engine uses a weak authentication method which leaks information that could be used by a remote attacker to recover the passw (no CVSS)
- [CVE-2000-0982](https://cve.now/CVE-2000-0982.md): Internet Explorer before 5.5 forwards cached user credentials for a secure web site to insecure pages on the same web site, which could allo (no CVSS)
- [CVE-2000-0983](https://cve.now/CVE-2000-0983.md): Microsoft NetMeeting with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service (CPU utilization) via a sequen (no CVSS)
- [CVE-2000-0984](https://cve.now/CVE-2000-0984.md): The HTTP server in Cisco IOS 12.0 through 12.1 allows local users to cause a denial of service (crash and reload) via a URL containing a "?/ (no CVSS)
- [CVE-2000-0989](https://cve.now/CVE-2000-0989.md): Buffer overflow in Intel InBusiness eMail Station 1.04.87 POP service allows remote attackers to cause a denial of service and possibly exec (no CVSS)
- [CVE-2000-0990](https://cve.now/CVE-2000-0990.md): cmd5checkpw 0.21 and earlier allows remote attackers to cause a denial of service via an "SMTP AUTH" command with an unknown username. (no CVSS)
- [CVE-2000-0991](https://cve.now/CVE-2000-0991.md): Buffer overflow in Hilgraeve, Inc. (no CVSS)
- [CVE-2000-0992](https://cve.now/CVE-2000-0992.md): Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. (no CVSS)
- [CVE-2000-0993](https://cve.now/CVE-2000-0993.md): Format string vulnerability in pw\_error function in BSD libutil library allows local users to gain root privileges via a malformed password (no CVSS)
- [CVE-2000-0994](https://cve.now/CVE-2000-0994.md): Format string vulnerability in OpenBSD fstat program (and possibly other BSD-based operating systems) allows local users to gain root privil (no CVSS)
- [CVE-2000-0995](https://cve.now/CVE-2000-0995.md): Format string vulnerability in OpenBSD yp\_passwd program (and possibly other BSD-based operating systems) allows attackers to gain root priv (no CVSS)
- [CVE-2000-0996](https://cve.now/CVE-2000-0996.md): Format string vulnerability in OpenBSD su program (and possibly other BSD-based operating systems) allows local attackers to gain root privi (no CVSS)
- [CVE-2000-1000](https://cve.now/CVE-2000-1000.md): Format string vulnerability in AOL Instant Messenger (AIM) 4.1.2010 allows remote attackers to cause a denial of service and possibly execut (no CVSS)
- [CVE-2000-1001](https://cve.now/CVE-2000-1001.md): add\_2\_basket.asp in Element InstantShop allows remote attackers to modify price information via the "price" hidden form variable. (no CVSS)
- [CVE-2000-1002](https://cve.now/CVE-2000-1002.md): POP3 daemon in Stalker CommuniGate Pro 3.3.2 generates different error messages for invalid usernames versus invalid passwords, which allows (no CVSS)
- [CVE-2000-1003](https://cve.now/CVE-2000-1003.md): NETBIOS client in Windows 95 and Windows 98 allows a remote attacker to cause a denial of service by changing a file sharing service to retu (no CVSS)
- [CVE-2000-1004](https://cve.now/CVE-2000-1004.md): Format string vulnerability in OpenBSD photurisd allows local users to execute arbitrary commands via a configuration file directory name th (no CVSS)
- [CVE-2000-1005](https://cve.now/CVE-2000-1005.md): Directory traversal vulnerability in html\_web\_store.cgi and web\_store.cgi CGI programs in eXtropia WebStore allows remote attackers to read (no CVSS)
- [CVE-2000-1006](https://cve.now/CVE-2000-1006.md): Microsoft Exchange Server 5.5 does not properly handle a MIME header with a blank charset specified, which allows remote attackers to cause (no CVSS)
- [CVE-2000-1007](https://cve.now/CVE-2000-1007.md): I-gear 3.5.7 and earlier does not properly process log entries in which a URL is longer than 255 characters, which allows an attacker to cau (no CVSS)
- [CVE-2000-1010](https://cve.now/CVE-2000-1010.md): Format string vulnerability in talkd in OpenBSD and possibly other BSD-based OSes allows remote attackers to execute arbitrary commands via (no CVSS)
- [CVE-2000-1011](https://cve.now/CVE-2000-1011.md): Buffer overflow in catopen() function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to gain root privileges via a (no CVSS)
- [CVE-2000-1014](https://cve.now/CVE-2000-1014.md): Format string vulnerability in the search97.cgi CGI script in SCO help http server for Unixware 7 allows remote attackers to execute arbitra (no CVSS)
- [CVE-2000-1016](https://cve.now/CVE-2000-1016.md): The default configuration of Apache (httpd.conf) on SuSE 6.4 includes an alias for the /usr/doc directory, which allows remote attackers to (no CVSS)
- [CVE-2000-1018](https://cve.now/CVE-2000-1018.md): shred 1.0 file wiping utility does not properly open a file for overwriting or flush its buffers, which prevents shred from properly replaci (no CVSS)
- [CVE-2000-1019](https://cve.now/CVE-2000-1019.md): Search engine in Ultraseek 3.1 and 3.1.10 (aka Inktomi Search) allows remote attackers to cause a denial of service via a malformed URL. (no CVSS)
- [CVE-2000-1022](https://cve.now/CVE-2000-1022.md): The mailguard feature in Cisco Secure PIX Firewall 5.2(2) and earlier does not properly restrict access to SMTP commands, which allows remot (no CVSS)
- [CVE-2000-1024](https://cve.now/CVE-2000-1024.md): eWave ServletExec 3.0C and earlier does not restrict access to the UploadServlet Java/JSP servlet, which allows remote attackers to upload f (no CVSS)
- [CVE-2000-1026](https://cve.now/CVE-2000-1026.md): Multiple buffer overflows in LBNL tcpdump allow remote attackers to execute arbitrary commands. (no CVSS)
- [CVE-2000-1027](https://cve.now/CVE-2000-1027.md): Cisco Secure PIX Firewall 5.2(2) allows remote attackers to determine the real IP address of a target FTP server by flooding the server with (no CVSS)
- [CVE-2000-1031](https://cve.now/CVE-2000-1031.md): Buffer overflow in dtterm in HP-UX 11.0 and HP Tru64 UNIX 4.0f through 5.1a allows local users to execute arbitrary code via a long -tn opti (no CVSS)
- [CVE-2000-1032](https://cve.now/CVE-2000-1032.md): The client authentication interface for Check Point Firewall-1 4.0 and earlier generates different error messages for invalid usernames vers (no CVSS)
- [CVE-2000-1034](https://cve.now/CVE-2000-1034.md): Buffer overflow in the System Monitor ActiveX control in Windows 2000 allows remote attackers to execute arbitrary commands via a long LogFi (no CVSS)
- [CVE-2000-1036](https://cve.now/CVE-2000-1036.md): Directory traversal vulnerability in Extent RBS ISP web server allows remote attackers to read sensitive information via a .. (no CVSS)
- [CVE-2000-1038](https://cve.now/CVE-2000-1038.md): The web administration interface for IBM AS/400 Firewall allows remote attackers to cause a denial of service via an empty GET request. (no CVSS)
- [CVE-2000-1040](https://cve.now/CVE-2000-1040.md): Format string vulnerability in logging function of ypbind 3.3, while running in debug mode, leaks file descriptors and allows an attacker to (no CVSS)
- [CVE-2000-1041](https://cve.now/CVE-2000-1041.md): Buffer overflow in ypbind 3.3 possibly allows an attacker to gain root privileges. (no CVSS)
- [CVE-2000-1042](https://cve.now/CVE-2000-1042.md): Buffer overflow in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root pri (no CVSS)
- [CVE-2000-1043](https://cve.now/CVE-2000-1043.md): Format string vulnerability in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to g (no CVSS)
- [CVE-2000-1044](https://cve.now/CVE-2000-1044.md): Format string vulnerability in ypbind-mt in SuSE SuSE-6.2, and possibly other Linux operating systems, allows an attacker to gain root privi (no CVSS)
- [CVE-2000-1045](https://cve.now/CVE-2000-1045.md): nss\_ldap earlier than 121, when run with nscd (name service caching daemon), allows remote attackers to cause a denial of service via a floo (no CVSS)
- [CVE-2000-1049](https://cve.now/CVE-2000-1049.md): Allaire JRun 3.0 http servlet server allows remote attackers to cause a denial of service via a URL that contains a long string of "." chara (no CVSS)
- [CVE-2000-1050](https://cve.now/CVE-2000-1050.md): Allaire JRun 3.0 http servlet server allows remote attackers to directly access the WEB-INF directory via a URL request that contains an ext (no CVSS)
- [CVE-2000-1051](https://cve.now/CVE-2000-1051.md): Directory traversal vulnerability in Allaire JRun 2.3 server allows remote attackers to read arbitrary files via the SSIFilter servlet. (no CVSS)
- [CVE-2000-1054](https://cve.now/CVE-2000-1054.md): Buffer overflow in CSAdmin module in CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to cause a denial of service and poss (no CVSS)
- [CVE-2000-1055](https://cve.now/CVE-2000-1055.md): Buffer overflow in CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to cause a denial of service and possibly execute arbit (no CVSS)
- [CVE-2000-1056](https://cve.now/CVE-2000-1056.md): CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to bypass LDAP authentication on the server if the LDAP server allows null (no CVSS)
- [CVE-2000-1057](https://cve.now/CVE-2000-1057.md): Vulnerabilities in database configuration scripts in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows local users to gain privi (no CVSS)
- [CVE-2000-1058](https://cve.now/CVE-2000-1058.md): Buffer overflow in OverView5 CGI program in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows remote attackers to cause a denial (no CVSS)
- [CVE-2000-1059](https://cve.now/CVE-2000-1059.md): The default configuration of the Xsession file in Mandrake Linux 7.1 and 7.0 bypasses the Xauthority access control mechanism with an "xhost (no CVSS)
- [CVE-2000-1060](https://cve.now/CVE-2000-1060.md): The default configuration of XFCE 3.5.1 bypasses the Xauthority access control mechanism with an "xhost + localhost" command in the xinitrc (no CVSS)
- [CVE-2000-1061](https://cve.now/CVE-2000-1061.md): Microsoft Virtual Machine (VM) in Internet Explorer 4.x and 5.x allows an unsigned applet to create and use ActiveX controls, which allows a (no CVSS)
- [CVE-2000-1068](https://cve.now/CVE-2000-1068.md): pollit.cgi in Poll It 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the poll\_options parameter. (no CVSS)
- [CVE-2000-1069](https://cve.now/CVE-2000-1069.md): pollit.cgi in Poll It 2.01 and earlier allows remote attackers to access administrative functions without knowing the real password by speci (no CVSS)
- [CVE-2000-1070](https://cve.now/CVE-2000-1070.md): pollit.cgi in Poll It 2.01 and earlier uses data files that are located under the web document root, which allows remote attackers to access (no CVSS)
- [CVE-2000-1071](https://cve.now/CVE-2000-1071.md): The GUI installation for iCal 2.1 Patch 2 disables access control for the X server using an "xhost +" command, which allows remote attackers (no CVSS)
- [CVE-2000-1072](https://cve.now/CVE-2000-1072.md): iCal 2.1 Patch 2 installs many files with world-writeable permissions, which allows local users to modify the iCal configuration and execute (no CVSS)
- [CVE-2000-1073](https://cve.now/CVE-2000-1073.md): csstart program in iCal 2.1 Patch 2 searches for the cshttpd program in the current working directory, which allows local users to gain root (no CVSS)
- [CVE-2000-1074](https://cve.now/CVE-2000-1074.md): csstart program in iCal 2.1 Patch 2 uses relative pathnames to install the libsocket and libnsl libraries, which could allow the icsuser acc (no CVSS)
- [CVE-2000-1077](https://cve.now/CVE-2000-1077.md): Buffer overflow in the SHTML logging functionality of iPlanet Web Server 4.x allows remote attackers to execute arbitrary commands via a lon (no CVSS)
- [CVE-2000-1080](https://cve.now/CVE-2000-1080.md): Quake 1 (quake1) and ProQuake 1.01 and earlier allow remote attackers to cause a denial of service via a malformed (empty) UDP packet. (no CVSS)
- [CVE-2000-1089](https://cve.now/CVE-2000-1089.md): Buffer overflow in Microsoft Phone Book Service allows local users to execute arbitrary commands, aka the "Phone Book Service Buffer Overflo (no CVSS)
- [CVE-2000-1094](https://cve.now/CVE-2000-1094.md): Buffer overflow in AOL Instant Messenger (AIM) before 4.3.2229 allows remote attackers to execute arbitrary commands via a "buddyicon" comma (no CVSS)
- [CVE-2000-1095](https://cve.now/CVE-2000-1095.md): modprobe in the modutils 2.3.x package on Linux systems allows a local user to execute arbitrary commands via shell metacharacters. (no CVSS)
- [CVE-2000-1096](https://cve.now/CVE-2000-1096.md): crontab by Paul Vixie uses predictable file names for a temporary file and does not properly ensure that the file is owned by the user execu (no CVSS)
- [CVE-2000-1097](https://cve.now/CVE-2000-1097.md): The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via a long username in the authenticatio (no CVSS)
- [CVE-2000-1099](https://cve.now/CVE-2000-1099.md): Java Runtime Environment in Java Development Kit (JDK) 1.2.2\_05 and earlier can allow an untrusted Java class to call into a disallowed clas (no CVSS)
- [CVE-2000-1106](https://cve.now/CVE-2000-1106.md): Trend Micro InterScan VirusWall creates an "Intscan" share to the "InterScan" directory with permissions that grant Full Control permissions (no CVSS)
- [CVE-2000-1107](https://cve.now/CVE-2000-1107.md): in.identd ident server in SuSE Linux 6.x and 7.0 allows remote attackers to cause a denial of service via a long request, which causes the s (no CVSS)
- [CVE-2000-1112](https://cve.now/CVE-2000-1112.md): Microsoft Windows Media Player 7 executes scripts in custom skin (.WMS) files, which could allow remote attackers to gain privileges via a s (no CVSS)
- [CVE-2000-1113](https://cve.now/CVE-2000-1113.md): Buffer overflow in Microsoft Windows Media Player allows remote attackers to execute arbitrary commands via a malformed Active Stream Redire (no CVSS)
- [CVE-2000-1115](https://cve.now/CVE-2000-1115.md): Buffer overflow in remote web administration component (webprox.dll) of 602Pro LAN SUITE before 2000.0.1.33 allows remote attackers to cause (no CVSS)
- [CVE-2000-1120](https://cve.now/CVE-2000-1120.md): Buffer overflow in digest command in IBM AIX 4.3.x and earlier allows local users to execute arbitrary commands. (no CVSS)
- [CVE-2000-1131](https://cve.now/CVE-2000-1131.md): Bill Kendrick web site guestbook (GBook) allows remote attackers to execute arbitrary commands via shell metacharacters in the \_MAILTO form (no CVSS)
- [CVE-2000-1132](https://cve.now/CVE-2000-1132.md): DCForum cgforum.cgi CGI script allows remote attackers to read arbitrary files, and delete the program itself, via a malformed "forum" varia (no CVSS)
- [CVE-2000-1135](https://cve.now/CVE-2000-1135.md): fshd (fsh daemon) in Debian GNU/Linux allows local users to overwrite files of other users via a symlink attack. (no CVSS)
- [CVE-2000-1136](https://cve.now/CVE-2000-1136.md): elvis-tiny before 1.4-10 in Debian GNU/Linux, and possibly other Linux operating systems, allows local users to overwrite files of other use (no CVSS)
- [CVE-2000-1137](https://cve.now/CVE-2000-1137.md): GNU ed before 0.2-18.1 allows local users to overwrite the files of other users via a symlink attack. (no CVSS)
- [CVE-2000-1139](https://cve.now/CVE-2000-1139.md): The installation of Microsoft Exchange 2000 before Rev. (no CVSS)
- [CVE-2000-1140](https://cve.now/CVE-2000-1140.md): Recourse ManTrap 1.6 does not properly hide processes from attackers, which could allow attackers to determine that they are in a honeypot s (no CVSS)
- [CVE-2000-1141](https://cve.now/CVE-2000-1141.md): Recourse ManTrap 1.6 modifies the kernel so that ".." does not appear in the /proc listing, which allows attackers to determine that they ar (no CVSS)
- [CVE-2000-1142](https://cve.now/CVE-2000-1142.md): Recourse ManTrap 1.6 generates an error when an attacker cd's to /proc/self/cwd and executes the pwd command, which allows attackers to dete (no CVSS)
- [CVE-2000-1143](https://cve.now/CVE-2000-1143.md): Recourse ManTrap 1.6 hides the first 4 processes that run on a Solaris system, which allows attackers to determine that they are in a honeyp (no CVSS)
- [CVE-2000-1144](https://cve.now/CVE-2000-1144.md): Recourse ManTrap 1.6 sets up a chroot environment to hide the fact that it is running, but the inode number for the resulting "/" file syste (no CVSS)
- [CVE-2000-1145](https://cve.now/CVE-2000-1145.md): Recourse ManTrap 1.6 allows attackers who have gained root access to use utilities such as crash or fsdb to read /dev/mem and raw disk devic (no CVSS)
- [CVE-2000-1146](https://cve.now/CVE-2000-1146.md): Recourse ManTrap 1.6 allows attackers to cause a denial of service via a sequence of commands that navigate into and out of the /proc/self d (no CVSS)
- [CVE-2000-1148](https://cve.now/CVE-2000-1148.md): The installation of VolanoChatPro chat server sets world-readable permissions for its configuration file and stores the server administrator (no CVSS)
- [CVE-2000-1149](https://cve.now/CVE-2000-1149.md): Buffer overflow in RegAPI.DLL used by Windows NT 4.0 Terminal Server allows remote attackers to execute arbitrary commands via a long userna (no CVSS)
- [CVE-2000-1162](https://cve.now/CVE-2000-1162.md): ghostscript before 5.10-16 allows local users to overwrite files of other users via a symlink attack. (no CVSS)
- [CVE-2000-1163](https://cve.now/CVE-2000-1163.md): ghostscript before 5.10-16 uses an empty LD\_RUN\_PATH environmental variable to find libraries in the current directory, which could allow lo (no CVSS)
- [CVE-2000-1167](https://cve.now/CVE-2000-1167.md): ppp utility in FreeBSD 4.1.1 and earlier does not properly restrict access as specified by the "nat deny\_incoming" command, which allows rem (no CVSS)
- [CVE-2000-1169](https://cve.now/CVE-2000-1169.md): OpenSSH SSH client before 2.3.0 does not properly disable X11 or agent forwarding, which could allow a malicious SSH server to gain access t (no CVSS)
- [CVE-2000-1178](https://cve.now/CVE-2000-1178.md): Joe text editor follows symbolic links when creating a rescue copy called DEADJOE during an abnormal exit, which allows local users to overw (no CVSS)
- [CVE-2000-1179](https://cve.now/CVE-2000-1179.md): Netopia ISDN Router 650-ST before 4.3.5 allows remote attackers to read system logs without authentication by directly connecting to the log (no CVSS)
- [CVE-2000-1181](https://cve.now/CVE-2000-1181.md): Real Networks RealServer 7 and earlier allows remote attackers to obtain portions of RealServer's memory contents, possibly including sensit (no CVSS)
- [CVE-2000-1182](https://cve.now/CVE-2000-1182.md): WatchGuard Firebox II allows remote attackers to cause a denial of service by flooding the Firebox with a large number of FTP or SMTP reques (no CVSS)
- [CVE-2000-1184](https://cve.now/CVE-2000-1184.md): telnetd in FreeBSD 4.2 and earlier, and possibly other operating systems, allows remote attackers to cause a denial of service by specifying (no CVSS)
- [CVE-2000-1187](https://cve.now/CVE-2000-1187.md): Buffer overflow in the HTML parser for Netscape 4.75 and earlier allows remote attackers to execute arbitrary commands via a long password v (no CVSS)
- [CVE-2000-1189](https://cve.now/CVE-2000-1189.md): Buffer overflow in pam\_localuser PAM module in Red Hat Linux 7.x and 6.x allows attackers to gain privileges. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2001-01-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.