2000 CVEs (page 12)
Page 12 of 13 — CVEs published in 2000, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2000-0097 | | 2000-01-26 | The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argument" vulnerability. | |
CVE-2000-0096 | | 2000-01-26 | Buffer overflow in qpopper 3.0 beta versions allows local users to gain privileges via a long LIST command. | |
CVE-2000-0095 | | 2000-01-24 | The PMTU discovery procedure used by HP-UX 10.30 and 11.00 for determining the optimum MTU generates large amounts of traffic in response to small packets, all… | |
CVE-2000-0115 | | 2000-01-21 | IIS allows local users to cause a denial of service via invalid regular expressions in a Visual Basic script in an ASP page. | |
CVE-2000-0093 | | 2000-01-21 | An installation of Red Hat uses DES password encryption with crypt() for the initial password, instead of md5. | |
CVE-2000-0091 | | 2000-01-21 | Buffer overflow in vchkpw/vpopmail POP authentication package allows remote attackers to gain root privileges via a long username or password. | |
CVE-2000-0088 | | 2000-01-20 | Buffer overflow in the conversion utilities for Japanese, Korean and Chinese Word 5 documents allows an attacker to execute commands, aka the "Malformed Conver… | |
CVE-2000-0092 | | 2000-01-19 | The BSD make program allows local users to modify files via a symlink attack when the -j option is being used. | |
CVE-2000-0099 | | 2000-01-18 | Buffer overflow in UnixWare ppptalk command allows local users to gain privileges via a long prompt argument. | |
CVE-2000-0086 | | 2000-01-18 | Netopia Timbuktu Pro sends user IDs and passwords in cleartext, which allows remote attackers to obtain them via sniffing. | |
CVE-2000-0079 | | 2000-01-18 | The W3C CERN httpd HTTP server allows remote attackers to determine the real pathnames of some commands via a request for a nonexistent URL. | |
CVE-2000-0090 | | 2000-01-17 | VMWare 1.1.2 allows local users to cause a denial of service via a symlink attack. | |
CVE-2000-0072 | | 2000-01-17 | Visual Casel (Vcasel) does not properly prevent users from executing files, which allows local users to use a relative pathname to specify an alternate file wh… | |
CVE-2000-0065 | | 2000-01-17 | Buffer overflow in InetServ 3.0 allows remote attackers to execute commands via a long GET request. | |
CVE-2000-0064 | | 2000-01-17 | cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to cause a denial of service via a malformed URL that includes shell metacharacters. | |
CVE-2000-0063 | | 2000-01-17 | cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to read arbitrary files by specifying the filename in a parameter to the script. | |
CVE-2000-0075 | | 2000-01-13 | Super Mail Transfer Package (SMTP), later called MsgCore, has a memory leak which allows remote attackers to cause a denial of service by repeating multiple HE… | |
CVE-2000-0066 | | 2000-01-13 | WebSite Pro allows remote attackers to determine the real pathname of webdirectories via a malformed URL request. | |
CVE-2000-0087 | | 2000-01-12 | Netscape Mail Notification (nsnotify) utility in Netscape Communicator uses IMAP without SSL, even if the user has set a preference for Communicator to use an… | |
CVE-2000-0070 | | 2000-01-12 | NtImpersonateClientOfPort local procedure call in Windows NT 4.0 allows local users to gain privileges, aka "Spoofed LPC Port Request." | |
CVE-2000-0048 | | 2000-01-12 | get_it program in Corel Linux Update allows local users to gain root access by specifying an alternate PATH for the cp program. | |
CVE-2000-0074 | | 2000-01-11 | PowerScripts PlusMail CGI program allows remote attackers to execute commands via a password file with improper permissions. | |
CVE-2000-0071 | | 2000-01-11 | IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensions. | |
CVE-2000-0067 | | 2000-01-11 | CyberCash Merchant Connection Kit (MCK) allows local users to modify files via a symlink attack. | |
CVE-2000-0045 | | 2000-01-11 | MySQL allows local users to modify passwords for arbitrary MySQL users via the GRANT privilege. | |
CVE-2000-0081 | | 2000-01-10 | Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute the code by using hexadecimal codes to specif… | |
CVE-2000-0080 | | 2000-01-10 | AIX techlibss allows local users to overwrite files via a symlink attack. | |
CVE-2000-0046 | | 2000-01-10 | Buffer overflow in ICQ 99b 1.1.1.1 client allows remote attackers to execute commands via a malformed URL within an ICQ message. | |
CVE-2000-1221 | | 2000-01-08 | The line printer daemon (lpd) in the lpr package in multiple Linux operating systems authenticates by comparing the reverse-resolved hostname of the local mach… | |
CVE-2000-1220 | | 2000-01-08 | The line printer daemon (lpd) in the lpr package in multiple Linux operating systems allows local users to gain root privileges by causing sendmail to execute… | |
CVE-2000-0061 | | 2000-01-07 | Internet Explorer 5 does not modify the security zone for a document that is being loaded into a window until after the document has been loaded, which could a… | |
CVE-2000-0084 | | 2000-01-06 | CuteFTP uses weak encryption to store password information in its tree.dat file. | |
CVE-2000-0055 | | 2000-01-06 | Buffer overflow in Solaris chkperm command allows local users to gain root access via a long -n option. | |
CVE-2000-0044 | | 2000-01-06 | Macros in War FTP 1.70 and 1.67b2 allow local or remote attackers to read arbitrary files or execute commands. | |
CVE-2000-0058 | | 2000-01-05 | Network HotSync program in Handspring Visor does not have authentication, which allows remote attackers to retrieve email and files. | |
CVE-2000-0056 | | 2000-01-05 | IMail IMONITOR status.cgi CGI script allows remote attackers to cause a denial of service with many calls to status.cgi. | |
CVE-2000-0085 | | 2000-01-04 | Hotmail does not properly filter JavaScript code from a user's mailbox, which allows a remote attacker to execute code via the LOWSRC or DYNRC parameters in th… | |
CVE-2000-0062 | | 2000-01-04 | The DTML implementation in the Z Object Publishing Environment (Zope) allows remote attackers to conduct unauthorized activities. | |
CVE-2000-0059 | | 2000-01-04 | PHP3 with safe_mode enabled does not properly filter shell metacharacters from commands that are executed by popen, which could allow remote attackers to execu… | |
CVE-2000-0057 | | 2000-01-04 | Cold Fusion CFCACHE tag places temporary cache files within the web document root, allowing remote attackers to obtain sensitive system information. | |
CVE-2000-0053 | | 2000-01-04 | Microsoft Commercial Internet System (MCIS) IMAP server allows remote attackers to cause a denial of service via a malformed IMAP request. | |
CVE-2000-0052 | | 2000-01-04 | Red Hat userhelper program in the usermode package allows local users to gain root access via PAM and a .. (dot dot) attack. | |
CVE-2000-0051 | | 2000-01-04 | The Allaire Spectra Configuration Wizard allows remote attackers to cause a denial of service by repeatedly resubmitting data collections for indexing via a UR… | |
CVE-2000-0050 | | 2000-01-04 | The Allaire Spectra Webtop allows authenticated users to access other Webtop sections by specifying explicit URLs. | |
CVE-2000-0049 | | 2000-01-04 | Buffer overflow in Winamp client allows remote attackers to execute commands via a long entry in a .pls file. | |
CVE-2000-0082 | | 2000-01-02 | WebTV email client allows remote attackers to force the client to send email without the user's knowledge via HTML. | |
CVE-2000-0078 | | 2000-01-02 | The June 1999 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the awk com… | |
CVE-2000-0077 | | 2000-01-02 | The October 1998 version of the HP-UX aserver program allows local users to gain privileges by specifying an alternate PATH which aserver uses to find the ps a… | |
CVE-2000-0120 | | 2000-01-01 | The Remote Access Service invoke.cfm template in Allaire Spectra 1.0 allows users to bypass authentication via the bAuthenticated parameter. | |
CVE-2000-0069 | | 2000-01-01 | The recover program in Solstice Backup allows local users to restore sensitive files. | |
CVE-2000-0015 | | 1999-12-31 | CascadeView TFTP server allows local users to gain privileges via a symlink attack. | |
CVE-2000-0013 | | 1999-12-31 | IRIX soundplayer program allows local users to gain privileges by including shell metacharacters in a .wav file, which is executed via the midikeys program. | |
CVE-2000-0011 | | 1999-12-31 | Buffer overflow in AnalogX SimpleServer:WWW HTTP server allows remote attackers to execute commands via a long GET request. | |
CVE-2000-0076 | | 1999-12-30 | nviboot boot script in the Debian nvi package allows local users to delete files via malformed entries in vi.recover. | |
CVE-2000-0043 | | 1999-12-30 | Buffer overflow in CamShot WebCam HTTP server allows remote attackers to execute commands via a long GET request. | |
CVE-2000-0003 | | 1999-12-30 | Buffer overflow in UnixWare rtpm program allows local users to gain privileges via a long environmental variable. | |
CVE-2000-0100 | | 1999-12-29 | The SMS Remote Control program is installed with insecure permissions, which allows local users to gain privileges by modifying or replacing the program. | |
CVE-2000-0042 | | 1999-12-29 | Buffer overflow in CSM mail server allows remote attackers to cause a denial of service or execute commands via a long HELO command. | |
CVE-2000-0039 | | 1999-12-29 | AltaVista search engine allows remote attackers to read files above the document root via a .. (dot dot) in the query.cgi CGI program. | |
CVE-2000-0009 | | 1999-12-29 | The bna_pass program in Optivity NETarchitect uses the PATH environmental variable for finding the "rm" program, which allows local users to execute arbitrary… | |
CVE-2000-0007 | | 1999-12-29 | Trend Micro PC-Cillin does not restrict access to its internal proxy port, allowing remote attackers to conduct a denial of service. | |
CVE-2000-0041 | | 1999-12-28 | Macintosh systems generate large ICMP datagrams in response to malformed datagrams, allowing them to be used as amplifiers in a flood attack. | |
CVE-2000-0037 | | 1999-12-28 | Majordomo wrapper allows local users to gain privileges by specifying an alternate configuration file. | |
CVE-2000-0035 | | 1999-12-28 | resend command in Majordomo allows local users to gain privileges via shell metacharacters. | |
CVE-2000-0014 | | 1999-12-28 | Denial of service in Savant web server via a null character in the requested URL. | |
CVE-2000-0060 | | 1999-12-27 | Buffer overflow in aVirt Rover POP3 server 1.1 allows remote attackers to cause a denial of service via a long user name. | |
CVE-2000-0033 | | 1999-12-27 | InterScan VirusWall SMTP scanner does not properly scan messages with malformed attachments. | |
CVE-2000-0029 | | 1999-12-27 | UnixWare pis and mkpis commands allow local users to gain privileges via a symlink attack. | |
CVE-2000-0027 | | 1999-12-27 | IBM Network Station Manager NetStation allows local users to gain privileges via a symlink attack. | |
CVE-2000-0012 | | 1999-12-27 | Buffer overflow in w3-msql CGI program in miniSQL package allows remote attackers to execute commands. | |
CVE-2000-0010 | | 1999-12-26 | WebWho+ whois.cgi program allows remote attackers to execute commands via shell metacharacters in the TLD parameter. | |
CVE-2000-0008 | | 1999-12-26 | FTPPro allows local users to read sensitive information, which is stored in plain text. | |
CVE-2000-0006 | | 1999-12-25 | strace allows local users to read arbitrary files via memory mapped file names. | |
CVE-2000-0040 | | 1999-12-23 | glFtpD allows local users to gain privileges via metacharacters in the SITE ZIPCHK command. | |
CVE-2000-0038 | | 1999-12-23 | glFtpD includes a default glftpd user account with a default password and a UID of 0. | |
CVE-2000-0028 | | 1999-12-23 | Internet Explorer 5.0 and 5.01 allows remote attackers to bypass the cross frame security policy and read files via the external.NavigateAndFind function. | |
CVE-2000-0001 | | 1999-12-23 | RealMedia server allows remote attackers to cause a denial of service via a long ramgen request. | |
CVE-2000-0119 | | 1999-12-22 | The default configurations for McAfee Virus Scan and Norton Anti-Virus virus checkers do not check files in the RECYCLED folder that is used by the Windows Rec… | |
CVE-2000-0036 | | 1999-12-22 | Outlook Express 5 for Macintosh downloads attachments to HTML mail without prompting the user, aka the "HTML Mail Attachment" vulnerability. | |
CVE-2000-0034 | | 1999-12-22 | Netscape 4.7 records user passwords in the preferences.js file during an IMAP or POP session, even if the user has not enabled "remember passwords." | |
CVE-2000-0032 | | 1999-12-22 | Solaris dmi_cmd allows local users to crash the dmispd daemon by adding a malformed file to the /var/dmi/db database. | |
CVE-2000-0030 | | 1999-12-22 | Solaris dmispd dmi_cmd allows local users to fill up restricted disk space by adding files to the /var/dmi/db database. | |
CVE-2000-0018 | | 1999-12-22 | wmmon in FreeBSD allows local users to gain privileges via the .wmmonrc configuration file. | |
CVE-2000-0002 | | 1999-12-22 | Buffer overflow in ZBServer Pro 1.50 allows remote attackers to execute commands via a long GET request. | |
CVE-2000-0026 | | 1999-12-21 | Buffer overflow in UnixWare i2odialogd daemon allows remote attackers to gain root access via a long username/password authorization string. | |
CVE-2000-0025 | | 1999-12-21 | IIS 4.0 and Site Server 3.0 allow remote attackers to read source code for ASP files if the file is in a virtual directory whose name includes extensions such… | |
CVE-2000-0024 | | 1999-12-21 | IIS does not properly canonicalize URLs, potentially allowing remote attackers to bypass access restrictions in third-party software via escape characters, aka… | |
CVE-2000-0023 | | 1999-12-21 | Buffer overflow in Lotus Domino HTTP server allows remote attackers to cause a denial of service via a long URL. | |
CVE-2000-0022 | | 1999-12-21 | Lotus Domino HTTP server does not properly disable anonymous access for the cgi-bin directory. | |
CVE-2000-0017 | | 1999-12-21 | Buffer overflow in Linux linuxconf package allows remote attackers to gain root privileges via a long parameter. | |
CVE-2000-0020 | | 1999-12-20 | DNS PRO allows remote attackers to conduct a denial of service via a large number of connections. | |
CVE-2000-0361 | | 1999-12-14 | The PPP wvdial.lxdialog script in wvdial 1.4 and earlier creates a .config file with world readable permissions, which allows a local attacker in the dialout g… | |
CVE-2000-0068 | | 1999-12-14 | daynad program in Intel InBusiness E-mail Station does not require authentication, which allows remote attackers to modify its configuration, delete files, or… | |
CVE-2000-0358 | | 1999-12-03 | ORBit and gnome-session in Red Hat Linux 6.1 allows remote attackers to crash a program. | |
CVE-2000-0357 | | 1999-12-03 | ORBit and esound in Red Hat Linux 6.1 do not use sufficiently random numbers, which allows local users to guess the authentication keys. | |
CVE-2000-0139 | | 1999-12-03 | Internet Anywhere POP3 Mail Server allows local users to cause a denial of service via a malformed RETR command. | |
CVE-2000-0366 | | 1999-12-02 | dump in Debian GNU/Linux 2.1 does not properly restore symlinks, which allows a local user to modify the ownership of arbitrary files. | |
CVE-2000-0021 | | 1999-12-01 | Lotus Domino HTTP server allows remote attackers to determine the real path of the server via a request to a non-existent script in /cgi-bin. | |
CVE-2000-0004 | | 1999-12-01 | ZBServer Pro allows remote attackers to read source code for executable files by inserting a . (dot) into the URL. | |
CVE-2000-0531 | | 1999-11-23 | Linux gpm program allows local users to cause a denial of service by flooding the /dev/gpmctl device with STREAM sockets. |