2000 CVEs (page 4)
Page 4 of 13 — CVEs published in 2000, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2000-1063 | | 2000-12-11 | Buffer overflow in the Telnet service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service. | |
CVE-2000-1062 | | 2000-12-11 | Buffer overflow in the FTP service in HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service. | |
CVE-2000-1061 | | 2000-12-11 | Microsoft Virtual Machine (VM) in Internet Explorer 4.x and 5.x allows an unsigned applet to create and use ActiveX controls, which allows a remote attacker to… | |
CVE-2000-1060 | | 2000-12-11 | The default configuration of XFCE 3.5.1 bypasses the Xauthority access control mechanism with an "xhost + localhost" command in the xinitrc program, which allo… | |
CVE-2000-1059 | | 2000-12-11 | The default configuration of the Xsession file in Mandrake Linux 7.1 and 7.0 bypasses the Xauthority access control mechanism with an "xhost + localhost" comma… | |
CVE-2000-1058 | | 2000-12-11 | Buffer overflow in OverView5 CGI program in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows remote attackers to cause a denial of service, and po… | |
CVE-2000-1057 | | 2000-12-11 | Vulnerabilities in database configuration scripts in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows local users to gain privileges, possibly via… | |
CVE-2000-1056 | | 2000-12-11 | CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to bypass LDAP authentication on the server if the LDAP server allows null passwords. | |
CVE-2000-1055 | | 2000-12-11 | Buffer overflow in CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a… | |
CVE-2000-1054 | | 2000-12-11 | Buffer overflow in CSAdmin module in CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to cause a denial of service and possibly execute arbitr… | |
CVE-2000-1053 | | 2000-12-11 | Allaire JRun 2.3.3 server allows remote attackers to compile and execute JSP code by inserting it via a cross-site scripting (CSS) attack and directly calling… | |
CVE-2000-1052 | | 2000-12-11 | Allaire JRun 2.3 server allows remote attackers to obtain source code for executable content by directly calling the SSIFilter servlet. | |
CVE-2000-1051 | | 2000-12-11 | Directory traversal vulnerability in Allaire JRun 2.3 server allows remote attackers to read arbitrary files via the SSIFilter servlet. | |
CVE-2000-1050 | | 2000-12-11 | Allaire JRun 3.0 http servlet server allows remote attackers to directly access the WEB-INF directory via a URL request that contains an extra "/" in the begin… | |
CVE-2000-1049 | | 2000-12-11 | Allaire JRun 3.0 http servlet server allows remote attackers to cause a denial of service via a URL that contains a long string of "." characters. | |
CVE-2000-1048 | | 2000-12-11 | Directory traversal vulnerability in the logfile service of Wingate 4.1 Beta A and earlier allows remote attackers to read arbitrary files via a .. (dot dot) a… | |
CVE-2000-1047 | | 2000-12-11 | Buffer overflow in SMTP service of Lotus Domino 5.0.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands… | |
CVE-2000-1046 | | 2000-12-11 | Multiple buffer overflows in the ESMTP service of Lotus Domino 5.0.2c and earlier allow remote attackers to cause a denial of service and possibly execute arbi… | |
CVE-2000-1045 | | 2000-12-11 | nss_ldap earlier than 121, when run with nscd (name service caching daemon), allows remote attackers to cause a denial of service via a flood of LDAP requests. | |
CVE-2000-1044 | | 2000-12-11 | Format string vulnerability in ypbind-mt in SuSE SuSE-6.2, and possibly other Linux operating systems, allows an attacker to gain root privileges. | |
CVE-2000-1043 | | 2000-12-11 | Format string vulnerability in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root privileges… | |
CVE-2000-1042 | | 2000-12-11 | Buffer overflow in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root privileges when ypserv… | |
CVE-2000-1041 | | 2000-12-11 | Buffer overflow in ypbind 3.3 possibly allows an attacker to gain root privileges. | |
CVE-2000-1040 | | 2000-12-11 | Format string vulnerability in logging function of ypbind 3.3, while running in debug mode, leaks file descriptors and allows an attacker to cause a denial of… | |
CVE-2000-1038 | | 2000-12-11 | The web administration interface for IBM AS/400 Firewall allows remote attackers to cause a denial of service via an empty GET request. | |
CVE-2000-1037 | | 2000-12-11 | Check Point Firewall-1 session agent 3.0 through 4.1 generates different error messages for invalid user names versus invalid passwords, which allows remote at… | |
CVE-2000-1036 | | 2000-12-11 | Directory traversal vulnerability in Extent RBS ISP web server allows remote attackers to read sensitive information via a .. (dot dot) attack on the Image par… | |
CVE-2000-1035 | | 2000-12-11 | Buffer overflows in TYPSoft FTP Server 0.78 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long… | |
CVE-2000-1034 | | 2000-12-11 | Buffer overflow in the System Monitor ActiveX control in Windows 2000 allows remote attackers to execute arbitrary commands via a long LogFileName parameter in… | |
CVE-2000-1033 | | 2000-12-11 | Serv-U FTP Server allows remote attackers to bypass its anti-hammering feature by first logging on as a valid user (possibly anonymous) and then attempting to… | |
CVE-2000-1032 | | 2000-12-11 | The client authentication interface for Check Point Firewall-1 4.0 and earlier generates different error messages for invalid usernames versus invalid password… | |
CVE-2000-1031 | | 2000-12-11 | Buffer overflow in dtterm in HP-UX 11.0 and HP Tru64 UNIX 4.0f through 5.1a allows local users to execute arbitrary code via a long -tn option. | |
CVE-2000-1030 | | 2000-12-11 | CS&T CorporateTime for the Web returns different error messages for invalid usernames and invalid passwords, which allows remote attackers to determine valid u… | |
CVE-2000-1029 | | 2000-12-11 | Buffer overflow in host command allows a remote attacker to execute arbitrary commands via a long response to an AXFR query. | |
CVE-2000-1028 | | 2000-12-11 | Buffer overflow in cu program in HP-UX 11.0 may allow local users to gain privileges via a long -l command line argument. | |
CVE-2000-1027 | | 2000-12-11 | Cisco Secure PIX Firewall 5.2(2) allows remote attackers to determine the real IP address of a target FTP server by flooding the server with PASV requests, whi… | |
CVE-2000-1026 | | 2000-12-11 | Multiple buffer overflows in LBNL tcpdump allow remote attackers to execute arbitrary commands. | |
CVE-2000-1025 | | 2000-12-11 | eWave ServletExec JSP/Java servlet engine, versions 3.0C and earlier, allows remote attackers to cause a denial of service via a URL that contains the "/servle… | |
CVE-2000-1024 | | 2000-12-11 | eWave ServletExec 3.0C and earlier does not restrict access to the UploadServlet Java/JSP servlet, which allows remote attackers to upload files and execute ar… | |
CVE-2000-1023 | | 2000-12-11 | The Alabanza Control Panel does not require passwords to access administrative commands, which allows remote attackers to modify domain name information via th… | |
CVE-2000-1022 | | 2000-12-11 | The mailguard feature in Cisco Secure PIX Firewall 5.2(2) and earlier does not properly restrict access to SMTP commands, which allows remote attackers to exec… | |
CVE-2000-1021 | | 2000-12-11 | Heap overflow in WebConfig in Mdaemon 3.1.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long… | |
CVE-2000-1020 | | 2000-12-11 | Heap overflow in Worldclient in Mdaemon 3.1.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a lo… | |
CVE-2000-1019 | | 2000-12-11 | Search engine in Ultraseek 3.1 and 3.1.10 (aka Inktomi Search) allows remote attackers to cause a denial of service via a malformed URL. | |
CVE-2000-1018 | | 2000-12-11 | shred 1.0 file wiping utility does not properly open a file for overwriting or flush its buffers, which prevents shred from properly replacing the file's data… | |
CVE-2000-1017 | | 2000-12-11 | Webteachers Webdata allows remote attackers with valid Webdata accounts to read arbitrary files by posting a request to import the file into the WebData databa… | |
CVE-2000-1016 | | 2000-12-11 | The default configuration of Apache (httpd.conf) on SuSE 6.4 includes an alias for the /usr/doc directory, which allows remote attackers to read package docume… | |
CVE-2000-1015 | | 2000-12-11 | The default configuration of Slashcode before version 2.0 Alpha has a default administrative password, which allows remote attackers to gain Slashcode privileg… | |
CVE-2000-1014 | | 2000-12-11 | Format string vulnerability in the search97.cgi CGI script in SCO help http server for Unixware 7 allows remote attackers to execute arbitrary commands via for… | |
CVE-2000-1013 | | 2000-12-11 | The setlocale function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmental variable. | |
CVE-2000-1012 | | 2000-12-11 | The catopen function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmental variable. | |
CVE-2000-1011 | | 2000-12-11 | Buffer overflow in catopen() function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to gain root privileges via a long environmental… | |
CVE-2000-1010 | | 2000-12-11 | Format string vulnerability in talkd in OpenBSD and possibly other BSD-based OSes allows remote attackers to execute arbitrary commands via a user name that co… | |
CVE-2000-1009 | | 2000-12-11 | dump in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which allows local users to obtain root privileges by modifying the… | |
CVE-2000-1008 | | 2000-12-11 | PalmOS 3.5.2 and earlier uses weak encryption to store the user password, which allows attackers with physical access to the Palm device to decrypt the passwor… | |
CVE-2000-1007 | | 2000-12-11 | I-gear 3.5.7 and earlier does not properly process log entries in which a URL is longer than 255 characters, which allows an attacker to cause reporting errors. | |
CVE-2000-1006 | | 2000-12-11 | Microsoft Exchange Server 5.5 does not properly handle a MIME header with a blank charset specified, which allows remote attackers to cause a denial of service… | |
CVE-2000-1005 | | 2000-12-11 | Directory traversal vulnerability in html_web_store.cgi and web_store.cgi CGI programs in eXtropia WebStore allows remote attackers to read arbitrary files via… | |
CVE-2000-1004 | | 2000-12-11 | Format string vulnerability in OpenBSD photurisd allows local users to execute arbitrary commands via a configuration file directory name that contains formatt… | |
CVE-2000-1003 | | 2000-12-11 | NETBIOS client in Windows 95 and Windows 98 allows a remote attacker to cause a denial of service by changing a file sharing service to return an unknown drive… | |
CVE-2000-1002 | | 2000-12-11 | POP3 daemon in Stalker CommuniGate Pro 3.3.2 generates different error messages for invalid usernames versus invalid passwords, which allows remote attackers t… | |
CVE-2000-1001 | | 2000-12-11 | add_2_basket.asp in Element InstantShop allows remote attackers to modify price information via the "price" hidden form variable. | |
CVE-2000-1000 | | 2000-12-11 | Format string vulnerability in AOL Instant Messenger (AIM) 4.1.2010 allows remote attackers to cause a denial of service and possibly execute arbitrary command… | |
CVE-2000-0999 | | 2000-12-11 | Format string vulnerabilities in OpenBSD ssh program (and possibly other BSD-based operating systems) allow attackers to gain root privileges. | |
CVE-2000-0998 | | 2000-12-11 | Format string vulnerability in top program allows local attackers to gain root privileges via the "kill" or "renice" function. | |
CVE-2000-1222 | | 2000-12-10 | AIX sysback before 4.2.1.13 uses a relative path to find and execute the hostname program, which allows local users to gain privileges by modifying the path to… | |
CVE-2000-1224 | | 2000-11-23 | Caucho Technology Resin 1.2 and possibly earlier allows remote attackers to view JSP source via an HTTP request to a .jsp file with certain characters appended… | |
CVE-2000-1217 | | 2000-11-21 | Microsoft Windows 2000 before Service Pack 2 (SP2), when running in a non-Windows 2000 domain and using NTLM authentication, and when credentials of an account… | |
CVE-2000-1223 | | 2000-11-20 | quikstore.cgi in Quikstore Shopping Cart allows remote attackers to execute arbitrary commands via shell metacharacters in the URL portion of an HTTP GET reque… | |
CVE-2000-0883 | | 2000-11-14 | The default configuration of mod_perl for Apache as installed on Mandrake Linux 6.1 through 7.1 sets the /perl/ directory to be browseable, which allows remote… | |
CVE-2000-0882 | | 2000-11-14 | Intel Express 500 series switches allow a remote attacker to cause a denial of service via a malformed ICMP packet, which causes the CPU to crash. | |
CVE-2000-0881 | | 2000-11-14 | The dccscan setuid program in LPPlus does not properly check if the user has the permissions to print the file that is specified to dccscan, which allows local… | |
CVE-2000-0880 | | 2000-11-14 | LPPlus creates the lpdprocess file with world-writeable permissions, which allows local users to kill arbitrary processes by specifying an alternate process ID… | |
CVE-2000-0879 | | 2000-11-14 | LPPlus programs dccsched, dcclpdser, dccbkst, dccshut, dcclpdshut, and dccbkstshut are installed setuid root and world executable, which allows arbitrary local… | |
CVE-2000-0878 | | 2000-11-14 | The mailto CGI script allows remote attacker to execute arbitrary commands via shell metacharacters in the emailadd form field. | |
CVE-2000-0877 | | 2000-11-14 | mailform.pl CGI script in MailForm 2.0 allows remote attackers to read arbitrary files by specifying the file name in the XX-attach_file parameter, which MailF… | |
CVE-2000-0876 | | 2000-11-14 | WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to obtain the full pathname of the server via a "%C" command, which generates an error message that incl… | |
CVE-2000-0875 | | 2000-11-14 | WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to cause a denial of service by sending a long string of unprintable characters. | |
CVE-2000-0874 | | 2000-11-14 | Eudora mail client includes the absolute path of the sender's host within a virtual card (VCF). | |
CVE-2000-0873 | | 2000-11-14 | netstat in AIX 4.x.x does not properly restrict access to the -Zi option, which allows local users to clear network interface statistics and possibly hide evid… | |
CVE-2000-0872 | | 2000-11-14 | explorer.php in PhotoAlbum 0.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) attack. | |
CVE-2000-0871 | | 2000-11-14 | Buffer overflow in EFTP allows remote attackers to cause a denial of service by sending a string that does not contain a newline, then disconnecting from the s… | |
CVE-2000-0870 | | 2000-11-14 | Buffer overflow in EFTP allows remote attackers to cause a denial of service via a long string. | |
CVE-2000-0869 | | 2000-11-14 | The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbitrary directories via the PROPFIND HTTP… | |
CVE-2000-0868 | | 2000-11-14 | The default configuration of Apache 1.3.12 in SuSE Linux 6.4 allows remote attackers to read source code for CGI scripts by replacing the /cgi-bin/ in the requ… | |
CVE-2000-0867 | | 2000-11-14 | Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, which allows local users to gain root privileges by triggering m… | |
CVE-2000-0866 | | 2000-11-14 | Interbase 6 SuperServer for Linux allows an attacker to cause a denial of service via a query containing 0 bytes. | |
CVE-2000-0865 | | 2000-11-14 | Buffer overflow in dvtermtype in Tridia Double Vision 3.07.00 allows local users to gain root privileges via a long terminal type argument. | |
CVE-2000-0864 | | 2000-11-14 | Race condition in the creation of a Unix domain socket in GNOME esound 0.2.19 and earlier allows a local user to change the permissions of arbitrary files and… | |
CVE-2000-0863 | | 2000-11-14 | Buffer overflow in listmanager earlier than 2.105.1 allows local users to gain additional privileges. | |
CVE-2000-0862 | | 2000-11-14 | Vulnerability in an administrative interface utility for Allaire Spectra 1.0.1 allows remote attackers to read and modify sensitive configuration information. | |
CVE-2000-0861 | | 2000-11-14 | Mailman 1.1 allows list administrators to execute arbitrary commands via shell metacharacters in the %(listname) macro expansion. | |
CVE-2000-0860 | | 2000-11-14 | The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary files by setting hidden form fields whose names match the names of… | |
CVE-2000-0859 | | 2000-11-14 | The web configuration server for NTMail V5 and V6 allows remote attackers to cause a denial of service via a series of partial HTTP requests. | |
CVE-2000-0858 | | 2000-11-14 | Vulnerability in Microsoft Windows NT 4.0 allows remote attackers to cause a denial of service in IIS by sending it a series of malformed requests which cause… | |
CVE-2000-0857 | | 2000-11-14 | The logging capability in muh 2.05d IRC server does not properly cleanse user-injected format strings, which allows remote attackers to cause a denial of servi… | |
CVE-2000-0856 | | 2000-11-14 | Buffer overflow in SunFTP build 9(1) allows remote attackers to cause a denial of service or possibly execute arbitrary commands via a long GET request. | |
CVE-2000-0855 | | 2000-11-14 | SunFTP build 9(1) allows remote attackers to cause a denial of service by connecting to the server and disconnecting before sending a newline. | |
CVE-2000-0854 | | 2000-11-14 | When a Microsoft Office 2000 document is launched, the directory of that document is first used to locate DLL's such as riched20.dll and msi.dll, which could a… | |
CVE-2000-0853 | | 2000-11-14 | YaBB Bulletin Board 9.1.2000 allows remote attackers to read arbitrary files via a .. (dot dot) attack. |