2000 CVEs (page 11)
Page 11 of 13 — CVEs published in 2000, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2000-0177 | | 2000-03-02 | DNSTools CGI applications allow remote attackers to execute arbitrary commands via shell metacharacters. | |
CVE-2000-0207 | | 2000-03-01 | SGI InfoSearch CGI program infosrch.cgi allows remote attackers to execute commands via shell metacharacters. | |
CVE-2000-0201 | | 2000-03-01 | The window.showHelp() method in Internet Explorer 5.x does not restrict HTML help files (.chm) to be executed from the local host, which allows remote attacker… | |
CVE-2000-0189 | | 2000-03-01 | ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onrequestend.cfm files. | |
CVE-2000-0216 | | 2000-02-29 | Microsoft email clients in Outlook, Exchange, and Windows Messaging automatically respond to Read Receipt and Delivery Receipt tags, which could allow an attac… | |
CVE-2000-0208 | | 2000-02-29 | The htdig (ht://Dig) CGI program htsearch allows remote attackers to read arbitrary files by enclosing the file name with backticks (`) in parameters to htsear… | |
CVE-2000-0191 | | 2000-02-29 | Axis StorPoint CD allows remote attackers to access administrator URLs without authentication via a .. (dot dot) attack. | |
CVE-2000-0176 | | 2000-02-29 | The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the server by requesting a URL for a directory o… | |
CVE-2000-0204 | | 2000-02-28 | The Trend Micro OfficeScan client allows remote attackers to cause a denial of service by making 5 connections to port 12345, which raises CPU utilization to 1… | |
CVE-2000-0203 | | 2000-02-28 | The Trend Micro OfficeScan client tmlisten.exe allows remote attackers to cause a denial of service via malformed data to port 12345. | |
CVE-2000-0196 | | 2000-02-28 | Buffer overflow in mhshow in the Linux nmh package allows remote attackers to execute commands via malformed MIME headers in an email message. | |
CVE-2000-0186 | | 2000-02-28 | Buffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long command line argument. | |
CVE-2000-0179 | | 2000-02-28 | HP OpenView OmniBack 2.55 allows remote attackers to cause a denial of service via a large number of connections to port 5555. | |
CVE-2000-0178 | | 2000-02-28 | ServerIron switches by Foundry Networks have predictable TCP/IP sequence numbers, which allows remote attackers to spoof or hijack sessions. | |
CVE-2000-0209 | | 2000-02-27 | Buffer overflow in Lynx 2.x allows remote attackers to crash Lynx and possibly execute commands via a long URL in a malicious web page. | |
CVE-2000-0188 | | 2000-02-27 | EZShopper 3.0 search.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute commands via shell metacharacters. | |
CVE-2000-0187 | | 2000-02-27 | EZShopper 3.0 loadpage.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute commands via shell metacharacters. | |
CVE-2000-0170 | | 2000-02-26 | Buffer overflow in the man program in Linux allows local users to gain privileges via the MANPAGER environmental variable. | |
CVE-2000-0221 | | 2000-02-25 | The Nautica Marlin bridge allows remote attackers to cause a denial of service via a zero length UDP packet to the SNMP port. | |
CVE-2000-0220 | | 2000-02-24 | ZoneAlarm sends sensitive system and network information in cleartext to the Zone Labs server if a user requests more information about an event. | |
CVE-2000-0217 | | 2000-02-24 | The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious xauth program. | |
CVE-2000-0214 | | 2000-02-24 | FTP Explorer uses weak encryption for storing the username, password, and profile of FTP sites. | |
CVE-2000-0212 | | 2000-02-24 | InterAccess TelnetD Server 4.0 allows remote attackers to conduct a denial of service via malformed terminal client configuration information. | |
CVE-2000-0195 | | 2000-02-24 | setxconf in Corel Linux allows local users to gain root access via the -T parameter, which executes the user's .xserverrc file. | |
CVE-2000-0194 | | 2000-02-24 | buildxconf in Corel Linux allows local users to modify or create arbitrary files via the -x or -f parameters. | |
CVE-2000-0219 | | 2000-02-23 | Red Hat 6.0 allows local users to gain root access by booting single user and hitting ^C at the password prompt. | |
CVE-2000-0213 | | 2000-02-23 | The Sambar server includes batch files ECHO.BAT and HELLO.BAT in the CGI directory, which allow remote attackers to execute commands via shell metacharacters. | |
CVE-2000-0211 | | 2000-02-23 | The Windows Media server allows remote attackers to cause a denial of service via a series of client handshake packets that are sent in an improper sequence, a… | |
CVE-2000-0182 | | 2000-02-23 | iPlanet Web Server 4.1 allows remote attackers to cause a denial of service via a large number of GET commands, which consumes memory and causes a kernel panic. | |
CVE-2000-0210 | | 2000-02-21 | The lit program in Sun Flex License Manager (FlexLM) follows symlinks, which allows local users to modify arbitrary files. | |
CVE-2000-0166 | | 2000-02-21 | Buffer overflow in the InterAccess telnet server TelnetD allows remote attackers to execute commands via a long login name. | |
CVE-2000-0163 | | 2000-02-21 | asmon and ascpu in FreeBSD allow local users to gain root privileges via a configuration file. | |
CVE-2000-0160 | | 2000-02-21 | The Microsoft Active Setup ActiveX component in Internet Explorer 4.x and 5.x allows a remote attacker to install software components without prompting the use… | |
CVE-2000-0164 | | 2000-02-20 | The installation of Sun Internet Mail Server (SIMS) creates a world-readable file that allows local users to obtain passwords. | |
CVE-2000-0162 | | 2000-02-18 | The Microsoft virtual machine (VM) in Internet Explorer 4.x and 5.x allows a remote attacker to read files via a malicious Java applet that escapes the Java sa… | |
CVE-2000-0161 | | 2000-02-18 | Sample web sites on Microsoft Site Server 3.0 Commerce Edition do not validate an identification number, which allows remote attackers to execute SQL commands. | |
CVE-2000-0155 | | 2000-02-18 | Windows NT Autorun executes the autorun.inf file on non-removable media, which allows local attackers to specify an alternate program to execute when other use… | |
CVE-2000-0159 | | 2000-02-17 | HP Ignite-UX does not save /etc/passwd when it creates an image of a trusted system, which can set the password field to a blank and allow an attacker to gain… | |
CVE-2000-0158 | | 2000-02-16 | Buffer overflow in MMDF server allows remote attackers to gain privileges via a long MAIL FROM command to the SMTP daemon. | |
CVE-2000-0156 | | 2000-02-16 | Internet Explorer 4.x and 5.x allows remote web servers to access files on the client that are outside of its security domain, aka the "Image Source Redirect"… | |
CVE-2000-0154 | | 2000-02-16 | The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack. | |
CVE-2000-0094 | | 2000-02-16 | procfs in BSD systems allows local users to gain root privileges by modifying the /proc/pid/mem interface via a modified file descriptor for stderr. | |
CVE-2000-0224 | | 2000-02-15 | ARCserve agent in SCO UnixWare 7.x allows local attackers to gain root privileges via a symlink attack. | |
CVE-2000-0222 | | 2000-02-15 | The installation for Windows 2000 does not activate the Administrator password until the system has rebooted, which allows remote attackers to connect to the A… | |
CVE-2000-0167 | | 2000-02-15 | IIS Inetinfo.exe allows local users to cause a denial of service by creating a mail file with a long name and a .txt.eml extension in the pickup directory. | |
CVE-2000-0197 | | 2000-02-14 | The Windows NT scheduler uses the drive mapping of the interactive user who is currently logged onto the system, which allows the local user to gain privileges… | |
CVE-2000-0150 | | 2000-02-12 | Check Point Firewall-1 allows remote attackers to bypass port access restrictions on an FTP server by forcing it to send malicious packets that Firewall-1 misi… | |
CVE-2000-0143 | | 2000-02-11 | The SSH protocol server sshd allows local users without shell access to redirect a TCP connection through a service that uses the standard system password data… | |
CVE-2000-0142 | | 2000-02-11 | The authentication protocol in Timbuktu Pro 2.0b650 allows remote attackers to cause a denial of service via connections to port 407 and 1417. | |
CVE-2000-0141 | | 2000-02-11 | Infopop Ultimate Bulletin Board (UBB) allows remote attackers to execute commands via shell metacharacters in the topic hidden field. | |
CVE-2000-0140 | | 2000-02-10 | Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service via a large number of connections. | |
CVE-2000-0215 | | 2000-02-08 | Vulnerability in SCO cu program in UnixWare 7.x allows local users to gain privileges. | |
CVE-2000-0149 | | 2000-02-08 | Zeus web server allows remote attackers to view the source code for CGI programs via a null character (%00) at the end of a URL. | |
CVE-2000-0148 | | 2000-02-08 | MySQL 3.22 allows remote attackers to bypass password authentication and access a database via a short check string. | |
CVE-2000-0147 | | 2000-02-08 | snmpd in SCO OpenServer has an SNMP community string that is writable by default, which allows local attackers to modify the host's configuration. | |
CVE-2000-0146 | | 2000-02-07 | The Java Server in the Novell GroupWise Web Access Enhancement Pack allows remote attackers to cause a denial of service via a long URL to the servlet. | |
CVE-2000-0144 | | 2000-02-07 | Axis 700 Network Scanner does not properly restrict access to administrator URLs, which allows users to bypass the password protection via a .. (dot dot) attac… | |
CVE-2000-0472 | | 2000-02-06 | Buffer overflow in innd 2.2.2 allows remote attackers to execute arbitrary commands via a cancel request containing a long message ID. | |
CVE-2000-0145 | | 2000-02-05 | The libguile.so library file used by gnucash in Debian GNU/Linux is installed with world-writable permissions. | |
CVE-2000-0129 | | 2000-02-04 | Buffer overflow in the SHGetPathFromIDList function of the Serv-U FTP server allows attackers to cause a denial of service by performing a LIST command on a ma… | |
CVE-2000-0128 | | 2000-02-04 | The Finger Server 0.82 allows remote attackers to execute commands via shell metacharacters. | |
CVE-2000-0089 | | 2000-02-04 | The rdisk utility in Microsoft Terminal Server Edition and Windows NT 4.0 stores registry hive information in a temporary file with permissions that allow loca… | |
CVE-2000-0218 | | 2000-02-03 | Buffer overflow in Linux mount and umount allows local users to gain root privileges via a long relative pathname. | |
CVE-2000-0127 | | 2000-02-03 | The Webspeed configuration program does not properly disable access to the WSMadmin utility, which allows remote attackers to gain privileges via wsisa.dll. | |
CVE-2000-0125 | | 2000-02-03 | wwwthreads does not properly cleanse numeric data or table names that are passed to SQL queries, which allows remote attackers to gain privileges for wwwthread… | |
CVE-2000-0124 | | 2000-02-03 | surfCONTROL SuperScout does not properly asign a category to web sites with a . (dot) at the end, which may allow users to bypass web access restrictions. | |
CVE-2000-0122 | | 2000-02-03 | Frontpage Server Extensions allows remote attackers to determine the physical path of a virtual directory via a GET request to the htimage.exe CGI program. | |
CVE-2000-0469 | | 2000-02-02 | Selena Sol WebBanner 4.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack. | |
CVE-2000-0114 | | 2000-02-02 | Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the /_vti_bin/ virtu… | |
CVE-2000-0112 | | 2000-02-02 | The default installation of Debian GNU/Linux uses an insecure Master Boot Record (MBR) which allows a local user to boot from a floppy disk during the installa… | |
CVE-2000-1205 | | 2000-02-01 | Cross site scripting vulnerabilities in Apache 1.3.0 through 1.3.11 allow remote attackers to execute script as other web site visitors via (1) the printenv CG… | |
CVE-2000-0157 | | 2000-02-01 | NetBSD ptrace call on VAX allows local users to gain privileges by modifying the PSL contents in the debugging process. | |
CVE-2000-0151 | | 2000-02-01 | GNU make follows symlinks when it reads a Makefile from stdin, which allows other local users to execute commands. | |
CVE-2000-0137 | | 2000-02-01 | The CartIt shopping cart application allows remote users to modify sensitive purchase information via hidden form fields. | |
CVE-2000-0136 | | 2000-02-01 | The Cart32 shopping cart application allows remote users to modify sensitive purchase information via hidden form fields. | |
CVE-2000-0135 | | 2000-02-01 | The @Retail shopping cart application allows remote users to modify sensitive purchase information via hidden form fields. | |
CVE-2000-0134 | | 2000-02-01 | The Check It Out shopping cart application allows remote users to modify sensitive purchase information via hidden form fields. | |
CVE-2000-0133 | | 2000-02-01 | Buffer overflows in Tiny FTPd 0.52 beta3 FTP server allows users to execute commands via the STOR, RNTO, MKD, XMKD, RMD, XRMD, APPE, SIZE, and RNFR commands. | |
CVE-2000-0131 | | 2000-02-01 | Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands. | |
CVE-2000-0123 | | 2000-02-01 | The shopping cart application provided with Filemaker allows remote users to modify sensitive purchase information via hidden form fields. | |
CVE-2000-0121 | | 2000-02-01 | The Recycle Bin utility in Windows NT and Windows 2000 allows local users to read or modify files by creating a subdirectory with the victim's SID in the recyc… | |
CVE-2000-0110 | | 2000-02-01 | The WebSiteTool shopping cart application allows remote users to modify sensitive purchase information via hidden form fields. | |
CVE-2000-0108 | | 2000-02-01 | The Intellivend shopping cart application allows remote users to modify sensitive purchase information via hidden form fields. | |
CVE-2000-0107 | | 2000-02-01 | Linux apcd program allows local attackers to modify arbitrary files via a symlink attack. | |
CVE-2000-0106 | | 2000-02-01 | The EasyCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields. | |
CVE-2000-0105 | | 2000-02-01 | Outlook Express 5.01 and Internet Explorer 5.01 allow remote attackers to view a user's email messages via a script that accesses a variable that references su… | |
CVE-2000-0104 | | 2000-02-01 | The Shoptron shopping cart application allows remote users to modify sensitive purchase information via hidden form fields. | |
CVE-2000-0103 | | 2000-02-01 | The SmartCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields. | |
CVE-2000-0102 | | 2000-02-01 | The SalesCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields. | |
CVE-2000-0101 | | 2000-02-01 | The Make-a-Store OrderPage shopping cart application allows remote users to modify sensitive purchase information via hidden form fields. | |
CVE-2000-0132 | | 2000-01-31 | Microsoft Java Virtual Machine allows remote attackers to read files via the getSystemResourceAsStream function. | |
CVE-2000-0109 | | 2000-01-31 | The mcsp Client Site Processor system (MultiCSP) in Standard and Poor's ComStock is installed with several accounts that have no passwords or easily guessable… | |
CVE-2000-0117 | | 2000-01-30 | The siteUserMod.cgi program in Cobalt RaQ2 servers allows any Site Administrator to modify passwords for other users, site administrators, and possibly admin (… | |
CVE-2000-0116 | | 2000-01-29 | Firewall-1 does not properly filter script tags, which allows remote attackers to bypass the "Strip Script Tags" restriction by including an extra < in front o… | |
CVE-2000-0111 | | 2000-01-29 | The RightFax web client uses predictable session numbers, which allows remote attackers to hijack user sessions. | |
CVE-2000-1216 | | 2000-01-27 | Buffer overflow in portmir for AIX 4.3.0 allows local users to corrupt lock files and gain root privileges via the echo_error routine. | |
CVE-2000-0130 | | 2000-01-27 | Buffer overflow in SCO scohelp program allows remote attackers to execute commands. | |
CVE-2000-0113 | | 2000-01-27 | The SyGate Remote Management program does not properly restrict access to its administration service, which allows remote attackers to cause a denial of servic… | |
CVE-2000-0126 | | 2000-01-26 | Sample Internet Data Query (IDQ) scripts in IIS 3 and 4 allow remote attackers to read files via a .. (dot dot) attack. | |
CVE-2000-0098 | | 2000-01-26 | Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file that does not exist. |