2000 CVEs (page 10)
Page 10 of 13 — CVEs published in 2000, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2000-0272 | | 2000-04-20 | RealNetworks RealServer allows remote attackers to cause a denial of service by sending malformed input to the server at port 7070. | |
CVE-2000-0268 | | 2000-04-20 | Cisco IOS 11.x and 12.x allows remote attackers to cause a denial of service by sending the ENVIRON option to the Telnet daemon before it is ready to accept it… | |
CVE-2000-0267 | | 2000-04-20 | Cisco Catalyst 5.4.x allows a user to gain access to the "enable" mode without a password. | |
CVE-2000-0292 | | 2000-04-19 | The Adtran MX2800 M13 Multiplexer allows remote attackers to cause a denial of service via a ping flood to the Ethernet interface, which causes the device to c… | |
CVE-2000-0257 | | 2000-04-19 | Buffer overflow in the NetWare remote web administration utility allows remote attackers to cause a denial of service or execute commands via a long URL. | |
CVE-2000-0256 | | 2000-04-19 | Buffer overflows in htimage.exe and Imagemap.exe in FrontPage 97 and 98 Server Extensions allow a user to conduct activities that are not otherwise available t… | |
CVE-2000-0271 | | 2000-04-18 | read-passwd and other Lisp functions in Emacs 20 do not properly clear the history of recently typed keys, which allows an attacker to read unencrypted passwor… | |
CVE-2000-0270 | | 2000-04-18 | The make-temp-name Lisp function in Emacs 20 creates temporary files with predictable names, which allows attackers to conduct a symlink attack. | |
CVE-2000-0269 | | 2000-04-18 | Emacs 20 does not properly set permissions for a slave PTY device when starting a new subprocess, which allows local users to read or modify communications bet… | |
CVE-2000-0266 | | 2000-04-18 | Internet Explorer 5.01 allows remote attackers to bypass the cross frame security policy via a malicious applet that interacts with the Java JSObject to modify… | |
CVE-2000-0083 | | 2000-04-18 | HP asecure creates the Audio Security File audio.sec with insecure permissions, which allows local users to cause a denial of service or gain additional privil… | |
CVE-2000-0265 | | 2000-04-17 | Panda Security 3.0 allows users to uninstall the Panda software via its Add/Remove Programs applet. | |
CVE-2000-0264 | | 2000-04-17 | Panda Security 3.0 with registry editing disabled allows users to edit the registry and gain privileges by directly executing a .reg file or using other method… | |
CVE-2000-0291 | | 2000-04-16 | Buffer overflow in Star Office 5.1 allows attackers to cause a denial of service by embedding a long URL within a document. | |
CVE-2000-0286 | | 2000-04-16 | X fontserver xfs allows local users to cause a denial of service via malformed input to the server. | |
CVE-2000-0285 | | 2000-04-16 | Buffer overflow in XFree86 3.3.x allows local users to execute arbitrary commands via a long -xkbmap parameter. | |
CVE-2000-0284 | | 2000-04-16 | Buffer overflow in University of Washington imapd version 4.7 allows users with a valid account to execute commands via LIST or other commands. | |
CVE-2000-0263 | | 2000-04-16 | The X font server xfs in Red Hat Linux 6.x allows an attacker to cause a denial of service via a malformed request. | |
CVE-2000-1218 | Critical | 9.8 | 2000-04-14 | The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to 0, which causes Win… |
CVE-2000-0260 | | 2000-04-14 | Buffer overflow in the dvwssr.dll DLL in Microsoft Visual Interdev 1.0 allows users to cause a denial of service or execute commands, aka the "Link View Server… | |
CVE-2000-0254 | | 2000-04-14 | The dansie shopping cart application cart.pl allows remote attackers to obtain the shopping cart database and configuration information via a URL that referenc… | |
CVE-2000-0250 | | 2000-04-14 | The crypt function in QNX uses weak encryption, which allows local users to decrypt passwords. | |
CVE-2000-0288 | | 2000-04-12 | Infonautics getdoc.cgi allows remote attackers to bypass the payment phase for accessing documents via a modified form variable. | |
CVE-2000-0287 | | 2000-04-12 | The BizDB CGI script bizdb-search.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the dbname parameter. | |
CVE-2000-0283 | | 2000-04-12 | The default installation of IRIX Performance Copilot allows remote attackers to access sensitive system information via the pmcd daemon. | |
CVE-2000-0282 | | 2000-04-12 | TalentSoft webpsvr daemon in the Web+ shopping cart application allows remote attackers to read arbitrary files via a .. (dot dot) attack on the webplus CGI pr… | |
CVE-2000-0262 | | 2000-04-12 | The AVM KEN! ISDN Proxy server allows remote attackers to cause a denial of service via a malformed request. | |
CVE-2000-0261 | | 2000-04-12 | The AVM KEN! web server allows remote attackers to read arbitrary files via a .. (dot dot) attack. | |
CVE-2000-0259 | | 2000-04-12 | The default permissions for the Cryptography\Offload registry key used by the OffloadModExpo in Windows NT 4.0 allows local users to obtain compromise the cryp… | |
CVE-2000-0258 | High | 7.5 | 2000-04-12 | IIS 4.0 and 5.0 allows remote attackers to cause a denial of service by sending many URLs with a large number of escaped characters, aka the "Myriad Escaped Ch… |
CVE-2000-0253 | | 2000-04-11 | The dansie shopping cart application cart.pl allows remote attackers to modify sensitive purchase information via hidden form fields. | |
CVE-2000-0252 | | 2000-04-11 | The dansie shopping cart application cart.pl allows remote attackers to execute commands via a shell metacharacters in a form variable. | |
CVE-2000-0294 | | 2000-04-10 | Buffer overflow in healthd for FreeBSD allows local users to gain root privileges. | |
CVE-2000-0276 | | 2000-04-10 | BeOS 4.5 and 5.0 allow local users to cause a denial of service via malformed direct system calls using interrupt 37. | |
CVE-2000-0275 | | 2000-04-10 | CRYPTOCard CryptoAdmin for PalmOS uses weak encryption to store a user's PIN number, which allows an attacker with access to the .PDB file to generate valid PT… | |
CVE-2000-0274 | | 2000-04-10 | The Linux trustees kernel patch allows attackers to cause a denial of service by accessing a file or directory with a long name. | |
CVE-2000-0273 | | 2000-04-09 | PCAnywhere allows remote attackers to cause a denial of service by terminating the connection before PCAnywhere provides a login prompt. | |
CVE-2000-0298 | | 2000-04-07 | The unattended installation of Windows 2000 with the OEMPreinstall option sets insecure permissions for the All Users and Default Users directories. | |
CVE-2000-0279 | | 2000-04-07 | BeOS allows remote attackers to cause a denial of service via malformed packets whose length field is less than the length of the headers. | |
CVE-2000-0301 | | 2000-04-06 | Ipswitch IMAIL server 6.02 and earlier allows remote attackers to cause a denial of service via the AUTH CRAM-MD5 command. | |
CVE-2000-0300 | | 2000-04-06 | The default encryption method of PcAnywhere 9.x uses weak encryption, which allows remote attackers to sniff and decrypt PcAnywhere or NT domain accounts. | |
CVE-2000-0251 | | 2000-04-06 | HP-UX 11.04 VirtualVault (VVOS) sends data to unprivileged processes via an interface that has multiple aliased IP addresses. | |
CVE-2000-0255 | | 2000-04-05 | The Nbase-Xyplex EdgeBlaster router allows remote attackers to cause a denial of service via a scan for the FormMail CGI program. | |
CVE-2000-0299 | | 2000-04-04 | Buffer overflow in WebObjects.exe in the WebObjects Developer 4.5 package allows remote attackers to cause a denial of service via an HTTP request with long he… | |
CVE-2000-0634 | | 2000-04-03 | The web administration interface for CommuniGate Pro 3.2.5 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack. | |
CVE-2000-0297 | | 2000-04-03 | Allaire Forums 2.0.5 allows remote attackers to bypass access restrictions to secure conferences via the rightAccessAllForums or rightModerateAllForums variabl… | |
CVE-2000-0280 | | 2000-04-03 | Buffer overflow in the RealNetworks RealPlayer client versions 6 and 7 allows remote attackers to cause a denial of service via a long Location URL. | |
CVE-2000-0277 | | 2000-04-03 | Microsoft Excel 97 and 2000 does not warn the user when executing Excel Macro Language (XLM) macros in external text files, which could allow an attacker to ex… | |
CVE-2000-0302 | | 2000-03-31 | Microsoft Index Server allows remote attackers to view the source code of ASP files by appending a %20 to the filename in the CiWebHitsFile argument to the nul… | |
CVE-2000-0296 | | 2000-03-31 | fcheck allows local users to gain privileges by embedding shell metacharacters into file names that are processed by fcheck. | |
CVE-2000-0290 | | 2000-03-31 | Buffer overflow in Webstar HTTP server allows remote attackers to cause a denial of service via a long GET request. | |
CVE-2000-0234 | | 2000-03-31 | The default configuration of Cobalt RaQ2 and RaQ3 as specified in access.conf allows remote attackers to view sensitive contents of a .htaccess file. | |
CVE-2000-0246 | | 2000-03-30 | IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote attackers to read the… | |
CVE-2000-0232 | | 2000-03-30 | Microsoft TCP/IP Printing Services, aka Print Services for Unix, allows an attacker to cause a denial of service via a malformed TCP/IP print request. | |
CVE-2000-0152 | | 2000-03-30 | Remote attackers can cause a denial of service in Novell BorderManager 3.5 by pressing the enter key in a telnet connection to port 2000. | |
CVE-2000-0244 | | 2000-03-29 | The Citrix ICA (Independent Computing Architecture) protocol uses weak encryption (XOR) for user authentication. | |
CVE-2000-0289 | | 2000-03-27 | IP masquerading in Linux 2.2.x allows remote attackers to route UDP packets through the internal interface by modifying the external source IP address and port… | |
CVE-2000-0245 | | 2000-03-27 | Vulnerability in SGI IRIX objectserver daemon allows remote attackers to create user accounts. | |
CVE-2000-0235 | | 2000-03-27 | Buffer overflow in the huh program in the orville-write package allows local users to gain root privileges. | |
CVE-2000-0281 | | 2000-03-26 | Buffer overflow in the Napster client beta 5 allows remote attackers to cause a denial of service via a long message. | |
CVE-2000-0243 | | 2000-03-25 | AnalogX SimpleServer:WWW HTTP server 1.03 allows remote attackers to cause a denial of service via a short GET request to cgi-bin. | |
CVE-2000-0242 | | 2000-03-25 | WindMail allows remote attackers to read arbitrary files or execute commands via shell metacharacters. | |
CVE-2000-0227 | | 2000-03-23 | The Linux 2.2.x kernel does not restrict the number of Unix domain sockets as defined by the wmem_max parameter, which allows local users to cause a denial of… | |
CVE-2000-0247 | | 2000-03-22 | Unknown vulnerability in Generic-NQS (GNQS) allows local users to gain root privileges. | |
CVE-2000-0229 | | 2000-03-22 | gpm-root in the gpm package does not properly drop privileges, which allows local users to gain privileges by starting a utility from gpm-root. | |
CVE-2000-0241 | | 2000-03-21 | vqSoft vqServer stores sensitive information such as passwords in cleartext in the server.cfg file, which allows attackers to gain privileges. | |
CVE-2000-0240 | | 2000-03-21 | vqSoft vqServer program allows remote attackers to read arbitrary files via a /........../ in the URL, a variation of a .. (dot dot) attack. | |
CVE-2000-0613 | | 2000-03-20 | Cisco Secure PIX Firewall does not properly identify forged TCP Reset (RST) packets, which allows remote attackers to force the firewall to close legitimate co… | |
CVE-2000-0226 | | 2000-03-20 | IIS 4.0 allows attackers to cause a denial of service by requesting a large buffer in a POST or PUT command which consumes memory, aka the "Chunked Transfer En… | |
CVE-2000-0238 | | 2000-03-17 | Buffer overflow in the web server for Norton AntiVirus for Internet Email Gateways allows remote attackers to cause a denial of service via a long URL. | |
CVE-2000-0236 | | 2000-03-17 | Netscape Enterprise Server with Directory Indexing enabled allows remote attackers to list server directories via web publishing tags such as ?wp-ver-info and… | |
CVE-2000-0228 | | 2000-03-17 | Microsoft Windows Media License Manager allows remote attackers to cause a denial of service by sending a malformed request that causes the manager to halt, ak… | |
CVE-2000-0231 | | 2000-03-16 | Linux kreatecd trusts a user-supplied path that is used to find the cdrecord program, allowing local users to gain root privileges. | |
CVE-2000-0239 | | 2000-03-15 | Buffer overflow in the MERCUR WebView WebMail server allows remote attackers to cause a denial of service via a long mail_user parameter in the GET request. | |
CVE-2000-0233 | | 2000-03-15 | SuSE Linux IMAP server allows remote attackers to bypass IMAP authentication and gain privileges. | |
CVE-2000-0198 | | 2000-03-15 | Buffer overflow in POP3 and IMAP servers in the MERCUR mail server suite allows remote attackers to cause a denial of service. | |
CVE-2000-0169 | | 2000-03-15 | Batch files in the Oracle web listener ows-bin directory allow remote attackers to execute commands via a malformed URL that includes '?&'. | |
CVE-2000-0199 | | 2000-03-14 | When a new SQL Server is registered in Enterprise Manager for Microsoft SQL Server 7.0 and the "Always prompt for login name and password" option is not set, t… | |
CVE-2000-0180 | | 2000-03-14 | Sojourn search engine allows remote attackers to read arbitrary files via a .. (dot dot) attack. | |
CVE-2000-0230 | | 2000-03-13 | Buffer overflow in imwheel allows local users to gain root privileges via the imwheel-solo script and a long HOME environmental variable. | |
CVE-2000-0237 | | 2000-03-11 | Netscape Enterprise Server with Web Publishing enabled allows remote attackers to list arbitrary directories via a GET request for the /publisher directory, wh… | |
CVE-2000-0181 | | 2000-03-11 | Firewall-1 3.0 and 4.0 leaks packets with private IP address information, which could allow remote attackers to determine the real IP address of the host that… | |
CVE-2000-0171 | | 2000-03-11 | atsadc in the atsar package for Linux does not properly check the permissions of an output file, which allows local users to gain root privileges. | |
CVE-2000-0223 | | 2000-03-10 | Buffer overflow in the wmcdplay CD player program for the WindowMaker desktop allows local users to gain root privileges via a long parameter. | |
CVE-2000-0183 | | 2000-03-10 | Buffer overflow in ircII 4.4 IRC client allows remote attackers to execute commands via the DCC chat capability. | |
CVE-2000-0173 | | 2000-03-10 | Vulnerability in the EELS system in SCO UnixWare 7.1.x allows remote attackers to cause a denial of service. | |
CVE-2000-0184 | | 2000-03-09 | Linux printtool sets the permissions of printer configuration files to be world-readable, which allows local attackers to obtain printer share passwords. | |
CVE-2000-0175 | | 2000-03-09 | Buffer overflow in StarOffice StarScheduler web server allows remote attackers to gain root access via a long GET command. | |
CVE-2000-0174 | | 2000-03-09 | StarOffice StarScheduler web server allows remote attackers to read arbitrary files via a .. (dot dot) attack. | |
CVE-2000-0202 | | 2000-03-08 | Microsoft SQL Server 7.0 and Microsoft Data Engine (MSDE) 1.0 allow remote attackers to gain privileges via a malformed Select statement in an SQL query. | |
CVE-2000-0185 | | 2000-03-08 | RealMedia RealServer reveals the real IP address of a Real Server, even if the address is supposed to be private. | |
CVE-2000-0225 | | 2000-03-07 | The Pocsag POC32 program does not properly prevent remote users from accessing its server port, even if the option has been disabled. | |
CVE-2000-0200 | | 2000-03-06 | Buffer overflow in Microsoft Clip Art Gallery allows remote attackers to cause a denial of service or execute commands via a malformed CIL (clip art library) f… | |
CVE-2000-0206 | | 2000-03-05 | The installation of Oracle 8.1.5.x on Linux follows symlinks and creates the orainstRoot.sh file with world-writeable permissions, which allows local users to… | |
CVE-2000-0192 | | 2000-03-05 | The default installation of Caldera OpenLinux 2.3 includes the CGI program rpm_query, which allows remote attackers to determine what packages are installed on… | |
CVE-2000-0168 | | 2000-03-04 | Microsoft Windows 9x operating systems allow an attacker to cause a denial of service via a pathname that includes file device names, aka the "DOS Device in Pa… | |
CVE-2000-0205 | | 2000-03-03 | Trend Micro OfficeScan allows remote attackers to replay administrative commands and modify the configuration of OfficeScan clients. | |
CVE-2000-0172 | | 2000-03-03 | The mtr program only uses a seteuid call when attempting to drop privileges, which could allow local users to gain root privileges. | |
CVE-2000-0193 | | 2000-03-02 | The default configuration of Dosemu in Corel Linux 1.0 allows local users to execute the system.com program and gain privileges. | |
CVE-2000-0190 | | 2000-03-02 | AOL Instant Messenger (AIM) client allows remote attackers to cause a denial of service via a message with a malformed ASCII value. |