CVE-2000-1254 | High | 7.5 | 2016-05-05 | crypto/rsa/rsa_gen.c in OpenSSL before 0.9.6 mishandles C bitwise-shift operations that exceed the size of an expression, which makes it easier for remote atta… |
CVE-2000-1247 | | | 2011-10-05 | The default configuration of the jserv-status handler in jserv.conf in Apache JServ 1.1.2 includes an "allow from 127.0.0.1" line, which allows local users to… |
CVE-2000-1246 | | | 2010-04-05 | NWFTPD.nlm before 5.01o in the FTP server in Novell NetWare 5.1 SP3 allows remote authenticated users to cause a denial of service (abend) by sending an RNTO c… |
CVE-2000-1245 | | | 2010-04-05 | Multiple unspecified vulnerabilities in NWFTPD.nlm before 5.01o in the FTP server in Novell NetWare 5.1 SP3 allow remote attackers to bypass intended restricti… |
CVE-2000-1209 | | | 2002-08-12 | The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) 1.0, including thir… |
CVE-2000-1208 | | | 2002-08-12 | Format string vulnerability in startprinting() function of printjob.c in BSD-based lpr lpd package may allow local users to gain privileges via an improper sys… |
CVE-2000-1210 | | | 2002-03-22 | Directory traversal vulnerability in source.jsp of Apache Tomcat before 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the argument… |
CVE-2000-1215 | | | 2001-09-19 | The default configuration of Lotus Domino server 5.0.8 includes system information (version, operating system, and build date) in the HTTP headers of replies… |
CVE-2000-1202 | | | 2001-08-31 | ikeyman in IBM IBMHSSSB 1.0 sets the CLASSPATH environmental variable to include the user's own CLASSPATH directories before the system's directories, which al… |
CVE-2000-1201 | | | 2001-08-31 | Check Point FireWall-1 allows remote attackers to cause a denial of service (high CPU) via a flood of packets to port 264. |
CVE-2000-1200 | | | 2001-08-31 | Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy function via a null sess… |
CVE-2000-1199 | | | 2001-08-31 | PostgreSQL stores usernames and passwords in plaintext in (1) pg_shadow and (2) pg_pwd, which allows attackers with sufficient privileges to gain access to dat… |
CVE-2000-1198 | Medium | 5.5 | 2001-08-31 | qpopper POP server creates lock files with predictable names, which allows local users to cause a denial of service for other users (lack of mail access) by cr… |
CVE-2000-1197 | | | 2001-08-31 | POP2 or POP3 server (pop3d) in imap-uw IMAP package on FreeBSD and other operating systems creates lock files with predictable names, which allows local users… |
CVE-2000-1196 | | | 2001-08-31 | PSCOErrPage.htm in Netscape PublishingXpert 2.5 before SP2 allows remote attackers to read arbitrary files by specifying the target file in the errPagePath par… |
CVE-2000-1195 | | | 2001-08-31 | telnet daemon (telnetd) from the Linux netkit package before netkit-telnet-0.16 allows remote attackers to bypass authentication when telnetd is running with t… |
CVE-2000-1194 | | | 2001-08-31 | Argosoft FRP server 1.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string to the (1) USER or (2)… |
CVE-2000-1193 | | | 2001-08-31 | Performance Metrics Collector Daemon (PMCD) in Performance Copilot in IRIX 6.x allows remote attackers to cause a denial of service (resource exhaustion) via a… |
CVE-2000-1192 | | | 2001-08-31 | Buffer overflow in BTT Software SNMP Trap Watcher 1.16 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a lon… |
CVE-2000-1191 | | | 2001-08-31 | htsearch program in htDig 3.2 beta, 3.1.6, 3.1.5, and earlier allows remote attackers to determine the physical path of the server by requesting a non-existent… |
CVE-2000-1190 | | | 2001-08-31 | imwheel-solo in imwheel package allows local users to modify arbitrary files via a symlink attack from the .imwheelrc file. |
CVE-2000-1203 | | | 2001-08-20 | Lotus Domino SMTP server 4.63 through 5.08 allows remote attackers to cause a denial of service (CPU consumption) by forging an email message with the sender a… |
CVE-2000-0892 | | | 2001-07-21 | Some telnet clients allow remote telnet servers to request environment variables from the client that may contain sensitive information, or remote web servers… |
CVE-2000-0891 | | | 2001-07-21 | A default ECL in Lotus Notes before 5.02 allows remote attackers to execute arbitrary commands by attaching a malicious program in an email message that is aut… |
CVE-2000-0375 | | | 2001-03-12 | The kernel in FreeBSD 3.2 follows symbolic links when it creates core dump files, which allows local attackers to modify arbitrary files. |
CVE-2000-0368 | | | 2001-03-12 | Classic Cisco IOS 9.1 and later allows attackers with access to the login prompt to obtain portions of the command history of previous users, which may allow t… |
CVE-2000-0351 | | | 2001-03-12 | Some packaging commands in SCO UnixWare 7.1.0 have insecure privileges, which allows local users to add or remove software packages. |
CVE-2000-0349 | | | 2001-03-12 | Vulnerability in the passthru driver in SCO UnixWare 7.1.0 allows an attacker to cause a denial of service. |
CVE-2000-0348 | | | 2001-03-12 | A vulnerability in the Sendmail configuration file sendmail.cf as installed in SCO UnixWare 7.1.0 and earlier allows an attacker to gain root privileges. |
CVE-2000-0315 | | | 2001-03-12 | traceroute in NetBSD 1.3.3 and Linux systems allows local unprivileged users to modify the source address of the packets, which could be used in spoofing attac… |
CVE-2000-0314 | | | 2001-03-12 | traceroute in NetBSD 1.3.3 and Linux systems allows local users to flood other systems by providing traceroute with a large waittime (-w) option, which is not… |
CVE-2000-0313 | | | 2001-03-12 | Vulnerability in OpenBSD 2.6 allows a local user to change interface media configurations. |
CVE-2000-0312 | | | 2001-03-12 | cron in OpenBSD 2.5 allows local users to gain root privileges via an argv[] that is not NULL terminated, which is passed to cron's fake popen function. |
CVE-2000-0310 | | | 2001-03-12 | IP fragment assembly in OpenBSD 2.4 allows a remote attacker to cause a denial of service by sending a large number of fragmented packets. |
CVE-2000-0309 | | | 2001-03-12 | The i386 trace-trap handling in OpenBSD 2.4 with DDB enabled allows a local user to cause a denial of service. |
CVE-2000-0308 | | | 2001-03-12 | Insecure file permissions for Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 in SCO UnixWare 7.0.x and 2.1.3 allow an attacker to g… |
CVE-2000-0307 | | | 2001-03-12 | Vulnerability in xserver in SCO UnixWare 2.1.x and OpenServer 5.05 and earlier allows an attacker to cause a denial of service which prevents access to reserve… |
CVE-2000-0306 | | | 2001-03-12 | Buffer overflow in calserver in SCO OpenServer allows remote attackers to gain root access via a long message. |
CVE-2000-0893 | | | 2001-02-16 | The presence of the Distributed GL Daemon (dgld) service on port 5232 on SGI IRIX systems allows remote attackers to identify the target host as an SGI system. |
CVE-2000-0890 | | | 2001-02-16 | periodic in FreeBSD 4.1.1 and earlier, and possibly other operating systems, allows local users to overwrite arbitrary files via a symlink attack. |
CVE-2000-1090 | | | 2001-02-12 | Microsoft IIS for Far East editions 4.0 and 5.0 allows remote attackers to read source code for parsed pages via a malformed URL that uses the lead-byte of a d… |
CVE-2000-0896 | | | 2001-02-12 | WatchGuard SOHO firewall allows remote attackers to cause a denial of service via a flood of fragmented IP packets, which causes the firewall to drop connectio… |
CVE-2000-0895 | | | 2001-02-12 | Buffer overflow in HTTP server on the WatchGuard SOHO firewall allows remote attackers to cause a denial of service and possibly execute arbitrary code via a l… |
CVE-2000-0894 | | | 2001-02-12 | HTTP server on the WatchGuard SOHO firewall does not properly restrict access to administrative functions such as password resets or rebooting, which allows at… |
CVE-2000-0889 | | | 2001-02-12 | Two Sun security certificates have been compromised, which could allow attackers to insert malicious code such as applets and make it appear that it is signed… |
CVE-2000-1189 | | | 2001-01-09 | Buffer overflow in pam_localuser PAM module in Red Hat Linux 7.x and 6.x allows attackers to gain privileges. |
CVE-2000-1188 | | | 2001-01-09 | Directory traversal vulnerability in Quikstore shopping cart program allows remote attackers to read arbitrary files via a .. (dot dot) attack in the "page" pa… |
CVE-2000-1187 | | | 2001-01-09 | Buffer overflow in the HTML parser for Netscape 4.75 and earlier allows remote attackers to execute arbitrary commands via a long password value in a form fiel… |
CVE-2000-1186 | | | 2001-01-09 | Buffer overflow in phf CGI program allows remote attackers to execute arbitrary commands by specifying a large number of arguments and including a long MIME he… |
CVE-2000-1185 | | | 2001-01-09 | The telnet proxy in RideWay PN proxy server allows remote attackers to cause a denial of service via a flood of connections that contain malformed requests. |
CVE-2000-1184 | | | 2001-01-09 | telnetd in FreeBSD 4.2 and earlier, and possibly other operating systems, allows remote attackers to cause a denial of service by specifying an arbitrary large… |
CVE-2000-1183 | | | 2001-01-09 | Buffer overflow in socks5 server on Linux allows attackers to execute arbitrary commands via a long connection request. |
CVE-2000-1182 | | | 2001-01-09 | WatchGuard Firebox II allows remote attackers to cause a denial of service by flooding the Firebox with a large number of FTP or SMTP requests, which disables… |
CVE-2000-1181 | | | 2001-01-09 | Real Networks RealServer 7 and earlier allows remote attackers to obtain portions of RealServer's memory contents, possibly including sensitive information, by… |
CVE-2000-1180 | | | 2001-01-09 | Buffer overflow in cmctl program in Oracle 8.1.5 Connection Manager Control allows local users to gain privileges via a long command line argument. |
CVE-2000-1179 | | | 2001-01-09 | Netopia ISDN Router 650-ST before 4.3.5 allows remote attackers to read system logs without authentication by directly connecting to the login screen and typin… |
CVE-2000-1178 | Medium | 5.5 | 2001-01-09 | Joe text editor follows symbolic links when creating a rescue copy called DEADJOE during an abnormal exit, which allows local users to overwrite the files of o… |
CVE-2000-1177 | | | 2001-01-09 | bb-hist.sh, bb-histlog.sh, bb-hostsvc.sh, bb-rep.sh, bb-replog.sh, and bb-ack.sh in Big Brother (BB) before 1.5d3 allows remote attackers to determine the exis… |
CVE-2000-1176 | | | 2001-01-09 | Directory traversal vulnerability in YaBB search.pl CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack in the "catsearch" for… |
CVE-2000-1175 | | | 2001-01-09 | Buffer overflow in Koules 1.4 allows local users to execute arbitrary commands via a long command line argument. |
CVE-2000-1174 | | | 2001-01-09 | Multiple buffer overflows in AFS ACL parser for Ethereal 0.8.13 and earlier allows remote attackers to execute arbitrary commands via a packet with a long user… |
CVE-2000-1173 | | | 2001-01-09 | Microsys CyberPatrol uses weak encryption (trivial encoding) for credit card numbers and uses no encryption for the remainder of the information during registr… |
CVE-2000-1172 | | | 2001-01-09 | Buffer overflow in Gaim 0.10.3 and earlier using the OSCAR protocol allows remote attackers to conduct a denial of service and possibly execute arbitrary comma… |
CVE-2000-1171 | | | 2001-01-09 | Directory traversal vulnerability in cgiforum.pl script in CGIForum 1.0 allows remote attackers to ready arbitrary files via a .. (dot dot) attack in the "thes… |
CVE-2000-1170 | | | 2001-01-09 | Buffer overflow in Netsnap webcam HTTP server before 1.2.9 allows remote attackers to execute arbitrary commands via a long GET request. |
CVE-2000-1169 | | | 2001-01-09 | OpenSSH SSH client before 2.3.0 does not properly disable X11 or agent forwarding, which could allow a malicious SSH server to gain access to the X11 display a… |
CVE-2000-1168 | | | 2001-01-09 | IBM HTTP Server 1.3.6 (based on Apache) allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long GET request. |
CVE-2000-1167 | | | 2001-01-09 | ppp utility in FreeBSD 4.1.1 and earlier does not properly restrict access as specified by the "nat deny_incoming" command, which allows remote attackers to co… |
CVE-2000-1166 | | | 2001-01-09 | Twig webmail system does not properly set the "vhosts" variable if it is not configured on the site, which allows remote attackers to insert arbitrary PHP (PHP… |
CVE-2000-1165 | | | 2001-01-09 | Balabit syslog-ng allows remote attackers to cause a denial of service (application crash) via a malformed log message that does not have a closing > in the pr… |
CVE-2000-1164 | | | 2001-01-09 | WinVNC installs the WinVNC3 registry key with permissions that give Special Access (read and modify) to the Everybody group, which allows users to read and mod… |
CVE-2000-1163 | | | 2001-01-09 | ghostscript before 5.10-16 uses an empty LD_RUN_PATH environmental variable to find libraries in the current directory, which could allow local users to execut… |
CVE-2000-1162 | | | 2001-01-09 | ghostscript before 5.10-16 allows local users to overwrite files of other users via a symlink attack. |
CVE-2000-1161 | | | 2001-01-09 | The installation of AdCycle banner management system leaves the build.cgi program in a web-accessible directory, which allows remote attackers to execute the p… |
CVE-2000-1160 | | | 2001-01-09 | NAI Sniffer Agent allows remote attackers to cause a denial of service (crash) by sending a large number of login requests. |
CVE-2000-1159 | | | 2001-01-09 | NAI Sniffer Agent allows remote attackers to gain privileges on the agent by sniffing the initial UDP authentication packets and spoofing commands. |
CVE-2000-1158 | | | 2001-01-09 | NAI Sniffer Agent uses base64 encoding for authentication, which allows attackers to sniff the network and easily decrypt usernames and passwords. |
CVE-2000-1157 | | | 2001-01-09 | Buffer overflow in NAI Sniffer Agent allows remote attackers to execute arbitrary commands via a long SNMP community name. |
CVE-2000-1156 | | | 2001-01-09 | StarOffice 5.2 follows symlinks and sets world-readable permissions for the /tmp/soffice.tmp directory, which allows a local user to read files of the user who… |
CVE-2000-1155 | | | 2001-01-09 | RHDaemon in RobinHood 1.1 web server in BeOS r5 pro and earlier allows remote attackers to cause a denial of service via long HTTP request. |
CVE-2000-1154 | | | 2001-01-09 | RHConsole in RobinHood 1.1 web server in BeOS r5 pro and earlier allows remote attackers to cause a denial of service via long HTTP request. |
CVE-2000-1153 | | | 2001-01-09 | PostMaster 1.0 in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL. |
CVE-2000-1152 | | | 2001-01-09 | Browser IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL. |
CVE-2000-1151 | | | 2001-01-09 | Baxter IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL. |
CVE-2000-1150 | | | 2001-01-09 | Felix IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL. |
CVE-2000-1149 | | | 2001-01-09 | Buffer overflow in RegAPI.DLL used by Windows NT 4.0 Terminal Server allows remote attackers to execute arbitrary commands via a long username, aka the "Termin… |
CVE-2000-1148 | | | 2001-01-09 | The installation of VolanoChatPro chat server sets world-readable permissions for its configuration file and stores the server administrator passwords in plain… |
CVE-2000-1147 | | | 2001-01-09 | Buffer overflow in IIS ISAPI .ASP parsing mechanism allows attackers to execute arbitrary commands via a long string to the "LANGUAGE" argument in a script tag. |
CVE-2000-1146 | | | 2001-01-09 | Recourse ManTrap 1.6 allows attackers to cause a denial of service via a sequence of commands that navigate into and out of the /proc/self directory and execut… |
CVE-2000-1145 | | | 2001-01-09 | Recourse ManTrap 1.6 allows attackers who have gained root access to use utilities such as crash or fsdb to read /dev/mem and raw disk devices to identify ManT… |
CVE-2000-1144 | | | 2001-01-09 | Recourse ManTrap 1.6 sets up a chroot environment to hide the fact that it is running, but the inode number for the resulting "/" file system is higher than no… |
CVE-2000-1143 | | | 2001-01-09 | Recourse ManTrap 1.6 hides the first 4 processes that run on a Solaris system, which allows attackers to determine that they are in a honeypot system. |
CVE-2000-1142 | | | 2001-01-09 | Recourse ManTrap 1.6 generates an error when an attacker cd's to /proc/self/cwd and executes the pwd command, which allows attackers to determine that they are… |
CVE-2000-1141 | | | 2001-01-09 | Recourse ManTrap 1.6 modifies the kernel so that ".." does not appear in the /proc listing, which allows attackers to determine that they are in a honeypot sys… |
CVE-2000-1140 | | | 2001-01-09 | Recourse ManTrap 1.6 does not properly hide processes from attackers, which could allow attackers to determine that they are in a honeypot system by comparing… |
CVE-2000-1139 | | | 2001-01-09 | The installation of Microsoft Exchange 2000 before Rev. A creates a user account with a known password, which could allow attackers to gain privileges, aka the… |
CVE-2000-1138 | | | 2001-01-09 | Lotus Notes R5 client R5.0.5 and earlier does not properly warn users when an S/MIME email message has been modified, which could allow an attacker to modify t… |
CVE-2000-1137 | | | 2001-01-09 | GNU ed before 0.2-18.1 allows local users to overwrite the files of other users via a symlink attack. |
CVE-2000-1136 | | | 2001-01-09 | elvis-tiny before 1.4-10 in Debian GNU/Linux, and possibly other Linux operating systems, allows local users to overwrite files of other users via a symlink at… |
CVE-2000-1135 | | | 2001-01-09 | fshd (fsh daemon) in Debian GNU/Linux allows local users to overwrite files of other users via a symlink attack. |