2000 CVEs (page 5)
Page 5 of 13 — CVEs published in 2000, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2000-0852 | | 2000-11-14 | Multiple buffer overflows in eject on FreeBSD and possibly other OSes allows local users to gain root privileges. | |
CVE-2000-0851 | | 2000-11-14 | Buffer overflow in the Still Image Service in Windows 2000 allows local users to gain additional privileges via a long WM_USER message, aka the "Still Image Se… | |
CVE-2000-0850 | | 2000-11-14 | Netegrity SiteMinder before 4.11 allows remote attackers to bypass its authentication mechanism by appending "$/FILENAME.ext" (where ext is .ccc, .class, or .j… | |
CVE-2000-0849 | | 2000-11-14 | Race condition in Microsoft Windows Media server allows remote attackers to cause a denial of service in the Windows Media Unicast Service via a malformed requ… | |
CVE-2000-0848 | | 2000-11-14 | Buffer overflow in IBM WebSphere web application server (WAS) allows remote attackers to execute arbitrary commands via a long Host: request header. | |
CVE-2000-0847 | | 2000-11-14 | Buffer overflow in University of Washington c-client library (used by pine and other programs) allows remote attackers to execute arbitrary commands via a long… | |
CVE-2000-0846 | | 2000-11-14 | Buffer overflow in Darxite 0.4 and earlier allows a remote attacker to execute arbitrary commands via a long username or password. | |
CVE-2000-0845 | | 2000-11-14 | kdebug daemon (kdebugd) in Digital Unix 4.0F allows remote attackers to read arbitrary files by specifying the full file name in the initialization packet. | |
CVE-2000-0844 | | 2000-11-14 | Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbit… | |
CVE-2000-0843 | | 2000-11-14 | Buffer overflow in pam_smb and pam_ntdom pluggable authentication modules (PAM) allow remote attackers to execute arbitrary commands via a login with a long us… | |
CVE-2000-0842 | | 2000-11-14 | The search97cgi/vtopic" in the UnixWare 7 scohelphttp webserver allows remote attackers to read arbitrary files via a .. (dot dot) attack. | |
CVE-2000-0841 | | 2000-11-14 | Buffer overflow in XMail POP3 server before version 0.59 allows remote attackers to execute arbitrary commands via a long APOP command. | |
CVE-2000-0840 | | 2000-11-14 | Buffer overflow in XMail POP3 server before version 0.59 allows remote attackers to execute arbitrary commands via a long USER command. | |
CVE-2000-0839 | | 2000-11-14 | WinCOM LPD 1.00.90 allows remote attackers to cause a denial of service via a large number of LPD options to the LPD port (515). | |
CVE-2000-0838 | | 2000-11-14 | Fastream FUR HTTP server 1.0b allows remote attackers to cause a denial of service via a long GET request. | |
CVE-2000-0837 | | 2000-11-14 | FTP Serv-U 2.5e allows remote attackers to cause a denial of service by sending a large number of null bytes. | |
CVE-2000-0836 | | 2000-11-14 | Buffer overflow in CamShot WebCam Trial2.6 allows remote attackers to execute arbitrary commands via a long Authorization header. | |
CVE-2000-0835 | | 2000-11-14 | search.dll Sambar ISAPI Search utility in Sambar Server 4.4 Beta 3 allows remote attackers to read arbitrary directories by specifying the directory in the que… | |
CVE-2000-0834 | | 2000-11-14 | The Windows 2000 telnet client attempts to perform NTLM authentication by default, which allows remote attackers to capture and replay the NTLM challenge/respo… | |
CVE-2000-0833 | | 2000-11-14 | Buffer overflow in WinSMTP 1.06f and 2.X allows remote attackers to cause a denial of service via a long (1) USER or (2) HELO command. | |
CVE-2000-0832 | | 2000-11-14 | Htgrep CGI program allows remote attackers to read arbitrary files by specifying the full pathname in the hdr parameter. | |
CVE-2000-0831 | | 2000-11-14 | Buffer overflow in Fastream FTP++ 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long username. | |
CVE-2000-0830 | | 2000-11-14 | annclist.exe in webTV for Windows allows remote attackers to cause a denial of service by via a large, malformed UDP packet to ports 22701 through 22705. | |
CVE-2000-0829 | | 2000-11-14 | The tmpwatch utility in Red Hat Linux forks a new process for each directory level, which allows local users to cause a denial of service by creating deeply ne… | |
CVE-2000-0828 | | 2000-11-14 | Buffer overflow in ddicgi.exe in Mobius DocumentDirect for the Internet 1.2 allows remote attackers to execute arbitrary commands via a long User-Agent paramet… | |
CVE-2000-0827 | | 2000-11-14 | Buffer overflow in the web authorization form of Mobius DocumentDirect for the Internet 1.2 allows remote attackers to cause a denial of service or execute arb… | |
CVE-2000-0826 | | 2000-11-14 | Buffer overflow in ddicgi.exe program in Mobius DocumentDirect for the Internet 1.2 allows remote attackers to execute arbitrary commands via a long GET reques… | |
CVE-2000-0825 | | 2000-11-14 | Ipswitch Imail 6.0 allows remote attackers to cause a denial of service via a large number of connections in which a long Host: header is sent, which causes a… | |
CVE-2000-0824 | | 2000-11-14 | The unsetenv function in glibc 2.1.1 does not properly unset an environmental variable if the variable is provided twice to a program, which could allow local… | |
CVE-2000-0813 | | 2000-11-14 | Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to redirect FTP connections to other servers ("FTP Bounce") via invalid FTP commands that… | |
CVE-2000-0812 | | 2000-11-14 | The administration module in Sun Java web server allows remote attackers to execute arbitrary commands by uploading Java code to the module and invoke the com… | |
CVE-2000-0809 | | 2000-11-14 | Buffer overflow in Getkey in the protocol checker in the inter-module communication mechanism in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote att… | |
CVE-2000-0808 | | 2000-11-14 | The seed generation mechanism in the inter-module S/Key authentication mechanism in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to byp… | |
CVE-2000-0807 | | 2000-11-14 | The OPSEC communications authentication mechanism (fwn1) in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to spoof connections, aka the… | |
CVE-2000-0806 | | 2000-11-14 | The inter-module authentication mechanism (fwa1) in Check Point VPN-1/FireWall-1 4.1 and earlier may allow remote attackers to conduct a denial of service, aka… | |
CVE-2000-0805 | | 2000-11-14 | Check Point VPN-1/FireWall-1 4.1 and earlier improperly retransmits encapsulated FWS packets, even if they do not come from a valid FWZ client, aka "Retransmis… | |
CVE-2000-0804 | | 2000-11-14 | Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to bypass the directionality check via fragmented TCP connection requests or reopening clo… | |
CVE-2000-1219 | | 2000-11-01 | The -ftrapv compiler option in gcc and g++ 3.3.3 and earlier does not handle all types of integer overflows, which may leave applications vulnerable to vulnera… | |
CVE-2000-1080 | | 2000-11-01 | Quake 1 (quake1) and ProQuake 1.01 and earlier allow remote attackers to cause a denial of service via a malformed (empty) UDP packet. | |
CVE-2000-0802 | | 2000-10-20 | The BAIR program does not properly restrict access to the Internet Explorer Internet options menu, which allows local users to obtain access to the menu by mod… | |
CVE-2000-0801 | | 2000-10-20 | Buffer overflow in bdf program in HP-UX 11.00 may allow local users to gain root privileges via a long -t option. | |
CVE-2000-0800 | | 2000-10-20 | String parsing error in rpc.kstatd in the linuxnfs or knfsd packages in SuSE and possibly other Linux systems allows remote attackers to gain root privileges. | |
CVE-2000-0799 | | 2000-10-20 | inpview in InPerson in SGI IRIX 5.3 through IRIX 6.5.10 allows local users to gain privileges via a symlink attack on the .ilmpAAA temporary file. | |
CVE-2000-0798 | | 2000-10-20 | The truncate function in IRIX 6.x does not properly check for privileges when the file is in the xfs file system, which allows local users to delete the conten… | |
CVE-2000-0797 | | 2000-10-20 | Buffer overflow in gr_osview in IRIX 6.2 and 6.3 allows local users to gain privileges via a long -D option. | |
CVE-2000-0796 | | 2000-10-20 | Buffer overflow in dmplay in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long command line option. | |
CVE-2000-0795 | | 2000-10-20 | Buffer overflow in lpstat in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long -n option. | |
CVE-2000-0794 | | 2000-10-20 | Buffer overflow in IRIX libgl.so library allows local users to gain root privileges via a long HOME variable to programs such as (1) gmemusage and (2) gr_osvie… | |
CVE-2000-0793 | | 2000-10-20 | Norton AntiVirus 5.00.01C with the Novell Netware client does not properly restart the auto-protection service after the first user has logged off of the syste… | |
CVE-2000-0792 | | 2000-10-20 | Gnome Lokkit firewall package before 0.41 does not properly restrict access to some ports, even if a user does not make any services available. | |
CVE-2000-0791 | | 2000-10-20 | Trustix installs the httpsd program for Apache-SSL with world-writeable permissions, which allows local users to replace it with a Trojan horse. | |
CVE-2000-0790 | | 2000-10-20 | The web-based folder display capability in Microsoft Internet Explorer 5.5 on Windows 98 allows local users to insert Trojan horse programs by modifying the Fo… | |
CVE-2000-0789 | | 2000-10-20 | WinU 5.x and earlier uses weak encryption to store its configuration password, which allows local users to decrypt the password and gain privileges. | |
CVE-2000-0788 | | 2000-10-20 | The Mail Merge tool in Microsoft Word does not prompt the user before executing Visual Basic (VBA) scripts in an Access database, which could allow an attacker… | |
CVE-2000-0787 | | 2000-10-20 | IRC Xchat client versions 1.4.2 and earlier allows remote attackers to execute arbitrary commands by encoding shell metacharacters into a URL which XChat uses… | |
CVE-2000-0786 | | 2000-10-20 | GNU userv 1.0.0 and earlier does not properly perform file descriptor swapping, which can corrupt the USERV_GROUPS and USERV_GIDS environmental variables and a… | |
CVE-2000-0785 | | 2000-10-20 | WircSrv IRC Server 5.07s allows IRC operators to read arbitrary files via the importmotd command, which sets the Message of the Day (MOTD) to the specified fil… | |
CVE-2000-0784 | | 2000-10-20 | sshd program in the Rapidstream 2.1 Beta VPN appliance has a hard-coded "rsadmin" account with a null password, which allows remote attackers to execute arbitr… | |
CVE-2000-0783 | | 2000-10-20 | Watchguard Firebox II allows remote attackers to cause a denial of service by sending a malformed URL to the authentication service on port 4100. | |
CVE-2000-0782 | | 2000-10-20 | netauth.cgi program in Netwin Netauth 4.2e and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack. | |
CVE-2000-0781 | | 2000-10-20 | uagentsetup in ARCServeIT Client Agent 6.62 does not properly check for the existence or ownership of a temporary file which is moved to the agent.cfg configur… | |
CVE-2000-0780 | | 2000-10-20 | The web server in IPSWITCH IMail 6.04 and earlier allows remote attackers to read and delete arbitrary files via a .. (dot dot) attack. | |
CVE-2000-0779 | | 2000-10-20 | Checkpoint Firewall-1 with the RSH/REXEC setting enabled allows remote attackers to bypass access restrictions and connect to a RSH/REXEC client via malformed… | |
CVE-2000-0778 | | 2000-10-20 | IIS 5.0 allows remote attackers to obtain source code for .ASP files and other scripts via an HTTP GET request with a "Translate: f" header, aka the "Specializ… | |
CVE-2000-0777 | | 2000-10-20 | The password protection feature of Microsoft Money can store the password in plaintext, which allows attackers with physical access to the system to obtain the… | |
CVE-2000-0776 | | 2000-10-20 | Mediahouse Statistics Server 5.02x allows remote attackers to execute arbitrary commands via a long HTTP GET request. | |
CVE-2000-0775 | | 2000-10-20 | Buffer overflow in RobTex Viking server earlier than 1.06-370 allows remote attackers to cause a denial of service or execute arbitrary commands via a long HTT… | |
CVE-2000-0774 | | 2000-10-20 | The sample Java servlet "test" in Bajie HTTP web server 0.30a reveals the real pathname of the web document root. | |
CVE-2000-0773 | | 2000-10-20 | Bajie HTTP web server 0.30a allows remote attackers to read arbitrary files via a URL that contains a "....", a variant of the dot dot directory traversal atta… | |
CVE-2000-0772 | | 2000-10-20 | The installation of Tumbleweed Messaging Management System (MMS) 4.6 and earlier (formerly Worldtalk Worldsecure) creates a default account "sa" with no passwo… | |
CVE-2000-0771 | | 2000-10-20 | Microsoft Windows 2000 allows local users to cause a denial of service by corrupting the local security policy via malformed RPC traffic, aka the "Local Securi… | |
CVE-2000-0770 | | 2000-10-20 | IIS 4.0 and 5.0 does not properly restrict access to certain types of files when their parent folders have less restrictive permissions, which could allow remo… | |
CVE-2000-0769 | | 2000-10-20 | O'Reilly WebSite Pro 2.3.7 installs the uploader.exe program with execute permissions for all users, which allows remote attackers to create and execute arbitr… | |
CVE-2000-0768 | | 2000-10-20 | A function in Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read clie… | |
CVE-2000-0767 | | 2000-10-20 | The ActiveX control for invoking a scriptlet in Internet Explorer 4.x and 5.x renders arbitrary file types instead of HTML, which allows an attacker to read ar… | |
CVE-2000-0766 | | 2000-10-20 | Buffer overflow in vqSoft vqServer 1.4.49 allows remote attackers to cause a denial of service or possibly gain privileges via a long HTTP GET request. | |
CVE-2000-0765 | | 2000-10-20 | Buffer overflow in the HTML interpreter in Microsoft Office 2000 allows an attacker to execute arbitrary commands via a long embedded object tag, aka the "Micr… | |
CVE-2000-0764 | | 2000-10-20 | Intel Express 500 series switches allow a remote attacker to cause a denial of service via a malformed IP packet. | |
CVE-2000-0763 | | 2000-10-20 | xlockmore and xlockf do not properly cleanse user-injected format strings, which allows local users to gain root privileges via the -d option. | |
CVE-2000-0762 | | 2000-10-20 | The default installation of eTrust Access Control (formerly SeOS) uses a default encryption key, which allows remote attackers to spoof the eTrust administrato… | |
CVE-2000-0761 | | 2000-10-20 | OS2/Warp 4.5 FTP server allows remote attackers to cause a denial of service via a long username. | |
CVE-2000-0760 | | 2000-10-20 | The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp… | |
CVE-2000-0759 | | 2000-10-20 | Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates an error message t… | |
CVE-2000-0758 | | 2000-10-20 | The web interface for Lyris List Manager 3 and 4 allows list subscribers to obtain administrative access by modifying the value of the list_admin hidden form f… | |
CVE-2000-0757 | | 2000-10-20 | The sysgen service in Aptis Totalbill does not perform authentication, which allows remote attackers to gain root privileges by connecting to the service and s… | |
CVE-2000-0756 | | 2000-10-20 | Microsoft Outlook 2000 does not properly process long or malformed fields in vCard (.vcf) files, which allows attackers to cause a denial of service. | |
CVE-2000-0755 | | 2000-10-20 | Vulnerability in the newgrp command in HP-UX 11.00 allows local users to gain privileges. | |
CVE-2000-0754 | | 2000-10-20 | Vulnerability in HP OpenView Network Node Manager (NMM) version 6.1 related to passwords. | |
CVE-2000-0753 | | 2000-10-20 | The Microsoft Outlook mail client identifies the physical path of the sender's machine within a winmail.dat attachment to Rich Text Format (RTF) files. | |
CVE-2000-0752 | | 2000-10-20 | Buffer overflows in brouted in FreeBSD and possibly other OSes allows local users to gain root privileges via long command line arguments. | |
CVE-2000-0751 | | 2000-10-20 | mopd (Maintenance Operations Protocol loader daemon) does not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary… | |
CVE-2000-0750 | | 2000-10-20 | Buffer overflow in mopd (Maintenance Operations Protocol loader daemon) allows remote attackers to execute arbitrary commands via a long file name. | |
CVE-2000-0749 | | 2000-10-20 | Buffer overflow in the Linux binary compatibility module in FreeBSD 3.x through 5.x allows local users to gain root privileges via long filenames in the linux… | |
CVE-2000-0748 | | 2000-10-20 | OpenLDAP 1.2.11 and earlier improperly installs the ud binary with group write permissions, which could allow any user in that group to replace the binary with… | |
CVE-2000-0747 | | 2000-10-20 | The logrotate script for OpenLDAP before 1.2.11 in Conectiva Linux sends an improper signal to the kernel log daemon (klogd) and kills it. | |
CVE-2000-0746 | | 2000-10-20 | Vulnerabilities in IIS 4.0 and 5.0 do not properly protect against cross-site scripting (CSS) attacks. They allow a malicious web site operator to embed scrip… | |
CVE-2000-0745 | | 2000-10-20 | admin.php3 in PHP-Nuke does not properly verify the PHP-Nuke administrator password, which allows remote attackers to gain privileges by requesting a URL that… | |
CVE-2000-0743 | | 2000-10-20 | Buffer overflow in University of Minnesota (UMN) gopherd 2.x allows remote attackers to execute arbitrary commands via a DES key generation request (GDESkey) t… | |
CVE-2000-0742 | | 2000-10-20 | The IPX protocol implementation in Microsoft Windows 95 and 98 allows remote attackers to cause a denial of service by sending a ping packet with a source IP a… | |
CVE-2000-0741 | | 2000-10-20 | Format string vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to execute arbitrary code via format… |