2000 CVEs (page 13)

Page 13 of 13 — CVEs published in 2000, newest first, with CVSS severity and publication dates.

All CVEs published in 2000 — newest first (page 13 of 13)
CVESeverityScorePublishedSummary
CVE-2000-03521999-11-18Pine before version 4.21 does not properly filter shell metacharacters from URLs, which allows remote attackers to execute arbitrary commands via a malformed U…
CVE-2000-00731999-11-17Buffer overflow in Microsoft Rich Text Format (RTF) reader allows attackers to cause a denial of service via a malformed control word.
CVE-2000-01651999-11-13The Delegate application proxy has several buffer overflows which allow a remote attacker to execute commands.
CVE-2000-03301999-11-12The networking software in Windows 95 and Windows 98 allows remote attackers to execute commands via a long file name string, aka the "File Access URL" vulnera…
CVE-2000-03291999-11-11A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embedded script in an HTML mail, aka the "Act…
CVE-2000-03631999-10-22Linux cdwtools 093 and earlier allows local users to gain root privileges via the /tmp directory.
CVE-2000-03621999-10-22Buffer overflows in Linux cdwtools 093 and earlier allows local users to gain root privileges.
CVE-2000-03271999-10-21Microsoft Virtual Machine (VM) allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation, aka…
CVE-2000-03561999-10-13Pluggable Authentication Modules (PAM) in Red Hat Linux 6.1 does not properly lock access to disabled NIS accounts.
CVE-2000-03691999-10-08The IDENT server in Caldera Linux 2.3 creates multiple threads for each IDENT request, which allows remote attackers to cause a denial of service.
CVE-2000-00471999-10-01Buffer overflow in Yahoo Pager/Messenger client allows remote attackers to cause a denial of service via a long URL within a message.
CVE-2000-00161999-10-01Buffer overflow in Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service or execute commands via a long username.
CVE-2000-04891999-09-05FreeBSD, NetBSD, and OpenBSD allow an attacker to cause a denial of service by creating a large number of socket pairs using the socketpair function, setting a…
CVE-2000-03281999-08-24Windows NT 4.0 generates predictable random TCP initial sequence numbers (ISN), which allows remote attackers to perform spoofing and session hijacking.
CVE-2000-03741999-08-22The default configuration of kdm in Caldera and Mandrake Linux, and possibly other distributions, allows XDMCP connections from any host, which allows remote a…
CVE-2000-03551999-08-21pg and pb in SuSE pbpg 1.x package allows an attacker to read arbitrary files.
CVE-2000-12061999-08-20Vulnerability in Apache httpd before 1.3.11, when configured for mass virtual hosting using mod_rewrite, or mod_vhost_alias in Apache 1.3.9, allows remote atta…
CVE-2000-03251999-08-20The Microsoft Jet database engine allows an attacker to execute commands via a database query, aka the "VBA Shell" vulnerability.
CVE-2000-03231999-07-28The Microsoft Jet database engine allows an attacker to modify text files via a database query, aka the "Text I-ISAM" vulnerability.
CVE-2000-03531999-06-28Pine 4.x allows a remote attacker to execute arbitrary commands via an index.html file which executes lynx and obtains a uudecoded file from a malicious web se…
CVE-2000-01181999-06-09The Red Hat Linux su program does not log failed password guesses if the su process is killed before it times out, which allows local attackers to conduct brut…
CVE-2000-04811999-06-01Buffer overflow in KDE Kmail allows a remote attacker to cause a denial of service via an attachment with a long file name.
CVE-2000-03731999-06-01Vulnerabilities in the KDE kvt terminal program allow local users to gain root privileges.
CVE-2000-03651999-06-01Red Hat Linux 6.0 installs the /dev/pts file system with insecure modes, which allows local users to write to other tty devices.
CVE-2000-03641999-06-01screen and rxvt in Red Hat Linux 6.0 do not properly set the modes of tty devices, which allows local users to write to other ttys.
CVE-2000-03331999-05-31tcpdump, Ethereal, and other sniffer packages allow remote attackers to cause a denial of service via malformed DNS packets in which a jump offset refers to it…
CVE-2000-04121999-05-01The gnapster and knapster clients for Napster do not properly restrict access only to MP3 files, which allows remote attackers to read arbitrary files from the…
CVE-2000-01531999-03-26FrontPage Personal Web Server (PWS) allows remote attackers to read files via a .... (dot dot) attack.
CVE-2000-00191999-03-04IMail POP3 daemon uses weak encryption, which allows local users to read files.
CVE-2000-03711999-03-01The libmediatool library used for the KDE mediatool allows local users to create arbitrary files via a symlink attack.
CVE-2000-03671999-02-18Vulnerability in eterm 0.8.8 in Debian GNU/Linux allows an attacker to gain root privileges.
CVE-2000-03701999-01-29The debug option in Caldera Linux smail allows remote attackers to execute commands via shell metacharacters in the -D option for the rmail command.
CVE-2000-00541999-01-03search.cgi in the SolutionScripts Home Free package allows remote attackers to view directories via a .. (dot dot) attack.
CVE-2000-00051999-01-02HP-UX aserver program allows local users to gain privileges via a symlink attack.
CVE-2000-05081994-12-19rpc.lockd in Red Hat Linux 6.1 and 6.2 allows remote attackers to cause a denial of service via a malformed request.
CVE-2000-03881990-05-09Buffer overflow in FreeBSD libmytinfo library allows local users to execute commands via a long TERMCAP environmental variable.