2000 CVEs (page 6)
Page 6 of 13 — CVEs published in 2000, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2000-0740 | | 2000-10-20 | Buffer overflow in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to execute arbitrary commands via a long URL in t… | |
CVE-2000-0739 | | 2000-10-20 | Directory traversal vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to read arbitrary files via a… | |
CVE-2000-0738 | | 2000-10-20 | WebShield SMTP 4.5 allows remote attackers to cause a denial of service by sending e-mail with a From: address that has a . (period) at the end, which causes W… | |
CVE-2000-0737 | | 2000-10-20 | The Service Control Manager (SCM) in Windows 2000 creates predictable named pipes, which allows a local user with console access to gain administrator privileg… | |
CVE-2000-0736 | | 2000-10-20 | Buffer overflow in Becky! Internet Mail client 1.26.04 and earlier allows remote attackers to cause a denial of service via a long Content-type: MIME header wh… | |
CVE-2000-0735 | | 2000-10-20 | Buffer overflow in Becky! Internet Mail client 1.26.03 and earlier allows remote attackers to cause a denial of service via a long Content-type: MIME header wh… | |
CVE-2000-0734 | | 2000-10-20 | eEye IRIS 1.01 beta allows remote attackers to cause a denial of service via a large number of UDP connections. | |
CVE-2000-0733 | | 2000-10-20 | Telnetd telnet server in IRIX 5.2 through 6.1 does not properly cleans user-injected format strings, which allows remote attackers to execute arbitrary command… | |
CVE-2000-0732 | | 2000-10-20 | Worm HTTP server allows remote attackers to cause a denial of service via a long URL. | |
CVE-2000-0731 | | 2000-10-20 | Directory traversal vulnerability in Worm HTTP server allows remote attackers to read arbitrary files via a .. (dot dot) attack. | |
CVE-2000-0730 | | 2000-10-20 | Vulnerability in newgrp command in HP-UX 11.0 allows local users to gain privileges. | |
CVE-2000-0729 | | 2000-10-20 | FreeBSD 5.x, 4.x, and 3.x allows local users to cause a denial of service by executing a program with a malformed ELF image header. | |
CVE-2000-0728 | | 2000-10-20 | xpdf PDF viewer client earlier than 0.91 allows local users to overwrite arbitrary files via a symlink attack. | |
CVE-2000-0727 | | 2000-10-20 | xpdf PDF viewer client earlier than 0.91 does not properly launch a web browser for embedded URL's, which allows an attacker to execute arbitrary commands via… | |
CVE-2000-0726 | | 2000-10-20 | CGIMail.exe CGI program in Stalkerlab Mailers 1.1.2 allows remote attackers to read arbitrary files by specifying the file in the $Attach$ hidden form variable. | |
CVE-2000-0725 | | 2000-10-20 | Zope before 2.2.1 does not properly restrict access to the getRoles method, which allows users who can edit DTML to add or modify roles by modifying the roles… | |
CVE-2000-0724 | | 2000-10-20 | The go-gnome Helix GNOME pre-installer allows local users to overwrite arbitrary files via a symlink attack on various files in /tmp, including uudecode, snarf… | |
CVE-2000-0723 | | 2000-10-20 | Helix GNOME Updater helix-update 0.5 and earlier does not properly create /tmp directories, which allows local users to create empty system configuration files… | |
CVE-2000-0722 | | 2000-10-20 | Helix GNOME Updater helix-update 0.5 and earlier allows local users to install arbitrary RPM packages by creating the /tmp/helix-install installation directory… | |
CVE-2000-0721 | | 2000-10-20 | The FSserial, FlagShip_c, and FlagShip_p programs in the FlagShip package are installed world-writeable, which allows local users to replace them with Trojan h… | |
CVE-2000-0720 | | 2000-10-20 | news.cgi in GWScripts News Publisher does not properly authenticate requests to add an author to the author index, which allows remote attackers to add new aut… | |
CVE-2000-0719 | | 2000-10-20 | VariCAD 7.0 is installed with world-writeable files, which allows local users to replace the VariCAD programs with a Trojan horse program. | |
CVE-2000-0718 | | 2000-10-20 | A race condition in MandrakeUpdate allows local users to modify RPM files while they are in the /tmp directory before they are installed. | |
CVE-2000-0717 | | 2000-10-20 | GoodTech FTP server allows remote attackers to cause a denial of service via a large number of RNTO commands. | |
CVE-2000-0716 | | 2000-10-20 | WorldClient email client in MDaemon 2.8 includes the session ID in the referer field of an HTTP request when the user clicks on a URL, which allows the visited… | |
CVE-2000-0715 | | 2000-10-20 | DiskCheck script diskcheck.pl in Red Hat Linux 6.2 allows local users to create or overwrite arbitrary files via a symlink attack on a temporary file. | |
CVE-2000-0714 | | 2000-10-20 | umb-scheme 3.2-11 for Red Hat Linux is installed with world-writeable files. | |
CVE-2000-0713 | | 2000-10-20 | Buffer overflow in Adobe Acrobat 4.05, Reader, Business Tools, and Fill In products that handle PDF files allows attackers to execute arbitrary commands via a… | |
CVE-2000-0712 | | 2000-10-20 | Linux Intrusion Detection System (LIDS) 0.9.7 allows local users to gain root privileges when LIDS is disabled via the security=0 boot option. | |
CVE-2000-0711 | | 2000-10-20 | Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which allows remote attackers to create a serve… | |
CVE-2000-0710 | | 2000-10-20 | The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to determine the physical path of the server components by re… | |
CVE-2000-0709 | | 2000-10-20 | The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to cause a denial of service in some components by requesting… | |
CVE-2000-0708 | | 2000-10-20 | Buffer overflow in Pragma Systems TelnetServer 2000 version 4.0 allows remote attackers to cause a denial of service via a long series of null characters to th… | |
CVE-2000-0707 | | 2000-10-20 | PCCS MySQLDatabase Admin Tool Manager 1.2.4 and earlier installs the file dbconnect.inc within the web root, which allows remote attackers to obtain sensitive… | |
CVE-2000-0706 | | 2000-10-20 | Buffer overflows in ntop running in web mode allows remote attackers to execute arbitrary commands. | |
CVE-2000-0705 | | 2000-10-20 | ntop running in web mode allows remote attackers to read arbitrary files via a .. (dot dot) attack. | |
CVE-2000-0704 | | 2000-10-20 | Buffer overflow in SGI Omron WorldView Wnn allows remote attackers to execute arbitrary commands via long JS_OPEN, JS_MKDIR, or JS_FILE_INFO commands. | |
CVE-2000-0703 | | 2000-10-20 | suidperl (aka sperl) does not properly cleanse the escape sequence "~!" before calling /bin/mail to send an error report, which allows local users to gain priv… | |
CVE-2000-0702 | | 2000-10-20 | The net.init rc script in HP-UX 11.00 (S008net.init) allows local users to overwrite arbitrary files via a symlink attack that points from /tmp/stcp.conf to th… | |
CVE-2000-0701 | | 2000-10-20 | The wrapper program in mailman 2.0beta3 and 2.0beta4 does not properly cleanse untrusted format strings, which allows local users to gain privileges. | |
CVE-2000-0700 | | 2000-10-20 | Cisco Gigabit Switch Routers (GSR) with Fast Ethernet / Gigabit Ethernet cards, from IOS versions 11.2(15)GS1A up to 11.2(19)GS0.2 and some versions of 12.0, d… | |
CVE-2000-0699 | | 2000-10-20 | Format string vulnerability in ftpd in HP-UX 10.20 allows remote attackers to cause a denial of service or execute arbitrary commands via format strings in the… | |
CVE-2000-0698 | | 2000-10-20 | Minicom 1.82.1 and earlier on some Linux systems allows local users to create arbitrary files owned by the uucp user via a symlink attack. | |
CVE-2000-0697 | | 2000-10-20 | The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execute commands via shell metacharacters. | |
CVE-2000-0696 | | 2000-10-20 | The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests to its supporting CGI scripts, which all… | |
CVE-2000-0695 | | 2000-10-20 | Buffer overflows in pgxconfig in the Raptor GFX configuration tool allow local users to gain privileges via command line options. | |
CVE-2000-0694 | | 2000-10-20 | pgxconfig in the Raptor GFX configuration tool allows local users to gain privileges via a symlink attack. | |
CVE-2000-0693 | | 2000-10-20 | pgxconfig in the Raptor GFX configuration tool uses a relative path name for a system call to the "cp" program, which allows local users to execute arbitrary c… | |
CVE-2000-0692 | | 2000-10-20 | ISS RealSecure 3.2.1 and 3.2.2 allows remote attackers to cause a denial of service via a flood of fragmented packets with the SYN flag set. | |
CVE-2000-0691 | | 2000-10-20 | The faxrunq and faxrunqd in the mgetty package allows local users to create or modify arbitrary files via a symlink attack which creates a symlink in from /var… | |
CVE-2000-0690 | | 2000-10-20 | Auction Weaver CGI script 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the fromfile parameter. | |
CVE-2000-0689 | | 2000-10-20 | Account Manager LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Acc… | |
CVE-2000-0688 | | 2000-10-20 | Subscribe Me LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Accoun… | |
CVE-2000-0687 | | 2000-10-20 | Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the catdir parameter. | |
CVE-2000-0686 | | 2000-10-20 | Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the fromfile parameter. | |
CVE-2000-0685 | | 2000-10-20 | BEA WebLogic 5.1.x does not properly restrict access to the PageCompileServlet, which could allow remote attackers to compile and execute Java JHTML code by di… | |
CVE-2000-0684 | | 2000-10-20 | BEA WebLogic 5.1.x does not properly restrict access to the JSPServlet, which could allow remote attackers to compile and execute Java JSP code by directly inv… | |
CVE-2000-0683 | | 2000-10-20 | BEA WebLogic 5.1.x allows remote attackers to read source code for parsed pages by inserting /*.shtml/ into the URL, which invokes the SSIServlet. | |
CVE-2000-0682 | | 2000-10-20 | BEA WebLogic 5.1.x allows remote attackers to read source code for parsed pages by inserting /ConsoleHelp/ into the URL, which invokes the FileServlet. | |
CVE-2000-0681 | | 2000-10-20 | Buffer overflow in BEA WebLogic server proxy plugin allows remote attackers to execute arbitrary commands via a long URL with a .JSP extension. | |
CVE-2000-0680 | | 2000-10-20 | The CVS 1.10.8 server does not properly restrict users from creating arbitrary Checkin.prog or Update.prog programs, which allows remote CVS committers to modi… | |
CVE-2000-0679 | | 2000-10-20 | The CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server to force the client to create arbitrary files. | |
CVE-2000-0678 | | 2000-10-20 | PGP 5.5.x through 6.5.3 does not properly check if an Additional Decryption Key (ADK) is stored in the signed portion of a public certificate, which allows an… | |
CVE-2000-0677 | | 2000-10-20 | Buffer overflow in IBM Net.Data db2www CGI program allows remote attackers to execute arbitrary commands via a long PATH_INFO environmental variable. | |
CVE-2000-0676 | | 2000-10-20 | Netscape Communicator and Navigator 4.04 through 4.74 allows remote attackers to read arbitrary files by using a Java applet to open a connection to a URL usin… | |
CVE-2000-0563 | | 2000-10-20 | The URLConnection function in MacOS Runtime Java (MRJ) 2.1 and earlier and the Microsoft virtual machine (VM) for MacOS allows a malicious web site operator to… | |
CVE-2000-0360 | | 2000-10-20 | Buffer overflow in INN 2.2.1 and earlier allows remote attackers to cause a denial of service via a maliciously formatted article. | |
CVE-2000-0359 | | 2000-10-20 | Buffer overflow in Trivial HTTP (THTTPd) allows remote attackers to cause a denial of service or execute arbitrary commands via a long If-Modified-Since header. | |
CVE-2000-0031 | | 2000-10-20 | The initscripts package in Red Hat Linux allows local users to gain privileges via a symlink attack. | |
CVE-2000-1214 | | 2000-10-18 | Buffer overflows in the (1) outpack or (2) buf variables of ping in iputils before 20001010, as distributed on Red Hat Linux 6.2 through 7J and other operating… | |
CVE-2000-1213 | | 2000-10-18 | ping in iputils before 20001010, as distributed on Red Hat Linux 6.2 through 7J and other operating systems, does not drop privileges after acquiring a raw soc… | |
CVE-2000-1204 | | 2000-10-13 | Vulnerability in the mod_vhost_alias virtual hosting module for Apache 1.3.9, 1.3.11 and 1.3.12 allows remote attackers to obtain the source code for CGI progr… | |
CVE-2000-0816 | | 2000-10-06 | Linux tmpwatch --fuser option allows local users to execute arbitrary commands by creating files whose names contain shell metacharacters. | |
CVE-2000-1207 | | 2000-09-30 | userhelper in the usermode package on Red Hat Linux executes non-setuid programs as root, which does not activate the security measures in glibc and allows the… | |
CVE-2000-0354 | | 2000-09-28 | mirror 2.8.x in Linux systems allows remote attackers to create files one level above the local target directory. | |
CVE-2000-1079 | | 2000-08-29 | Interactions between the CIFS Browser Protocol and NetBIOS as implemented in Microsoft Windows 95, 98, NT, and 2000 allow remote attackers to modify dynamic Ne… | |
CVE-2000-0545 | | 2000-08-08 | Buffer overflow in mailx mail command (aka Mail) on Linux systems allows local users to gain privileges via a long -c (carbon copy) parameter. | |
CVE-2000-0278 | | 2000-08-03 | The SalesLogix Eviewer allows remote attackers to cause a denial of service by accessing the URL for the slxweb.dll administration program, which does not auth… | |
CVE-2000-0673 | | 2000-07-27 | The NetBIOS Name Server (NBNS) protocol does not perform authentication, which allows remote attackers to cause a denial of service by sending a spoofed Name C… | |
CVE-2000-0668 | | 2000-07-27 | pam_console PAM module in Linux systems allows a user to access the system console and reboot the system when a display manager such as gdm or kdm has XDMCP en… | |
CVE-2000-0667 | | 2000-07-27 | Vulnerability in gpm in Caldera Linux allows local users to delete arbitrary files or conduct a denial of service. | |
CVE-2000-0664 | | 2000-07-26 | AnalogX SimpleServer:WWW 1.06 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot) attack that uses the %2E URL encoding for… | |
CVE-2000-0637 | | 2000-07-26 | Microsoft Excel 97 and 2000 allows an attacker to execute arbitrary commands by specifying a malicious .dll using the Register.ID function, aka the "Excel REGI… | |
CVE-2000-0663 | | 2000-07-25 | The registry entry for the Windows Shell executable (Explorer.exe) in Windows NT and Windows 2000 uses a relative path name, which allows local users to execut… | |
CVE-2000-0659 | | 2000-07-25 | Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long user ID in a SOCKS4 CONNECT request. | |
CVE-2000-0658 | | 2000-07-25 | Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long USER command in the POP3 protocol. | |
CVE-2000-0657 | | 2000-07-25 | Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long HELO command in the SMTP protocol. | |
CVE-2000-0656 | | 2000-07-25 | Buffer overflow in AnalogX proxy server 4.04 and earlier allows remote attackers to cause a denial of service via a long USER command in the FTP protocol. | |
CVE-2000-0655 | | 2000-07-25 | Netscape Communicator 4.73 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a JPEG image containing a comment… | |
CVE-2000-0652 | | 2000-07-24 | IBM WebSphere allows remote attackers to read source code for executable web files by directly calling the default InvokerServlet using a URL which contains th… | |
CVE-2000-0671 | | 2000-07-21 | Roxen web server earlier than 2.0.69 allows allows remote attackers to bypass access restrictions, list directory contents, and read source code by inserting a… | |
CVE-2000-0647 | | 2000-07-21 | WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by executing an MLST command before logging into the server. | |
CVE-2000-0646 | | 2000-07-21 | WFTPD and WFTPD Pro 2.41 allows remote attackers to obtain the real pathname for a file by executing a STATUS (STAT) command while the file is being transferre… | |
CVE-2000-0645 | | 2000-07-21 | WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by using the RESTART (REST) command and writing beyond the end of a file, or writ… | |
CVE-2000-0644 | | 2000-07-21 | WFTPD and WFTPD Pro 2.41 allows remote attackers to cause a denial of service by executing a STAT command while the LIST command is still executing. | |
CVE-2000-0672 | | 2000-07-20 | The default configuration of Jakarta Tomcat does not restrict access to the /admin context, which allows remote attackers to read arbitrary files by directly c… | |
CVE-2000-0653 | | 2000-07-20 | Microsoft Outlook Express allows remote attackers to monitor a user's email by creating a persistent browser link to the Outlook Express windows, aka the "Pers… | |
CVE-2000-0624 | | 2000-07-20 | Buffer overflow in Winamp 2.64 and earlier allows remote attackers to execute arbitrary commands via a long #EXTINF: extension in the M3U playlist. | |
CVE-2000-0621 | | 2000-07-20 | Microsoft Outlook 98 and 2000, and Outlook Express 4.0x and 5.0x, allow remote attackers to read files on the client's system via a malformed HTML message that… | |
CVE-2000-0636 | | 2000-07-19 | HP JetDirect printers versions G.08.20 and H.08.20 and earlier allow remote attackers to cause a denial of service via a malformed FTP quote command. |