2000 CVEs (page 7)
Page 7 of 13 — CVEs published in 2000, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2000-0622 | | 2000-07-19 | Buffer overflow in Webfind CGI program in O'Reilly WebSite Professional web server 2.x allows remote attackers to execute arbitrary commands via a URL containi… | |
CVE-2000-0619 | | 2000-07-19 | Top Layer AppSwitch 2500 allows remote attackers to cause a denial of service via malformed ICMP packets. | |
CVE-2000-0615 | | 2000-07-19 | LPRng 3.6.x improperly installs lpd as setuid root, which can allow local users to append lpd trace and logging messages to files. | |
CVE-2000-0633 | | 2000-07-18 | Vulnerability in Mandrake Linux usermode package allows local users to to reboot or halt the system. | |
CVE-2000-0627 | | 2000-07-18 | BlackBoard CourseInfo 4.0 does not properly authenticate users, which allows local users to modify CourseInfo database information and gain privileges by direc… | |
CVE-2000-0626 | | 2000-07-18 | Buffer overflow in Alibaba web server allows remote attackers to cause a denial of service via a long GET request. | |
CVE-2000-0625 | | 2000-07-18 | NetZero 3.0 and earlier uses weak encryption for storing a user's login information, which allows a local user to decrypt the password. | |
CVE-2000-0567 | | 2000-07-18 | Buffer overflow in Microsoft Outlook and Outlook Express allows remote attackers to execute arbitrary commands via a long Date field in an email header, aka th… | |
CVE-2000-0665 | | 2000-07-17 | GAMSoft TelSrv telnet server 1.5 and earlier allows remote attackers to cause a denial of service via a long username. | |
CVE-2000-0632 | | 2000-07-17 | Buffer overflow in the web archive component of L-Soft Listserv 1.8d and earlier allows remote attackers to execute arbitrary commands via a long query string. | |
CVE-2000-0630 | | 2000-07-17 | IIS 4.0 and 5.0 allows remote attackers to obtain fragments of source code by appending a +.htr to the URL, a variant of the "File Fragment Reading via .HTR" v… | |
CVE-2000-0623 | | 2000-07-17 | Buffer overflow in O'Reilly WebSite Professional web server 2.4 and earlier allows remote attackers to execute arbitrary commands via a long GET request or Ref… | |
CVE-2000-0666 | | 2000-07-16 | rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain roo… | |
CVE-2000-0662 | | 2000-07-14 | Internet Explorer 5.x and Microsoft Outlook allows remote attackers to read arbitrary files by redirecting the contents of an IFRAME using the DHTML Edit Contr… | |
CVE-2000-0631 | | 2000-07-14 | An administrative script from IIS 3.0, later included in IIS 4.0 and 5.0, allows remote attackers to cause a denial of service by accessing the script without… | |
CVE-2000-0675 | | 2000-07-13 | Buffer overflow in Infopulse Gatekeeper 3.5 and earlier allows remote attackers to execute arbitrary commands via a long string. | |
CVE-2000-0649 | | 2000-07-13 | IIS 4.0 allows remote attackers to obtain the internal IP address of the server via an HTTP 1.0 request for a web page which is protected by basic authenticati… | |
CVE-2000-0674 | | 2000-07-12 | ftp.pl CGI program for Virtual Visions FTP browser allows remote attackers to read directories outside of the document root via a .. (dot dot) attack. | |
CVE-2000-0670 | | 2000-07-12 | The cvsweb CGI script in CVSWeb 1.80 allows remote attackers with write access to a CVS repository to execute arbitrary commands via shell metacharacters. | |
CVE-2000-0660 | | 2000-07-12 | The WDaemon web server for WorldClient 2.1 allows remote attackers to read arbitrary files via a .. (dot dot) attack. | |
CVE-2000-0643 | | 2000-07-12 | Buffer overflow in WebActive HTTP Server 1.00 allows remote attackers to cause a denial of service via a long URL. | |
CVE-2000-0642 | | 2000-07-12 | The default configuration of WebActive HTTP Server 1.00 stores the web access log active.log in the document root, which allows remote attackers to view the lo… | |
CVE-2000-0629 | | 2000-07-12 | The default configuration of the Sun Java web server 2.0 and earlier allows remote attackers to execute arbitrary commands by uploading Java code to the server… | |
CVE-2000-0372 | | 2000-07-12 | Vulnerability in Caldera rmt command in the dump package 0.4b4 allows a local user to gain root privileges. | |
CVE-2000-0669 | | 2000-07-11 | Novell NetWare 5.0 allows remote attackers to cause a denial of service by flooding port 40193 with random data. | |
CVE-2000-0654 | | 2000-07-11 | Microsoft Enterprise Manager allows local users to obtain database passwords via the Data Transformation Service (DTS) package Registered Servers Dialog dialog… | |
CVE-2000-0650 | | 2000-07-11 | The default installation of VirusScan 4.5 and NetShield 4.5 has insecure permissions for the registry key that identifies the AutoUpgrade directory, which allo… | |
CVE-2000-0648 | | 2000-07-11 | WFTPD and WFTPD Pro 2.41 allows local users to cause a denial of service by executing the RENAME TO (RNTO) command before a RENAME FROM (RNFR) command. | |
CVE-2000-0638 | | 2000-07-11 | bb-hostsvc.sh in Big Brother 1.4h1 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack on the HOSTSVC parameter. | |
CVE-2000-0628 | | 2000-07-11 | The source.asp example script in the Apache ASP module Apache::ASP 1.93 and earlier allows remote attackers to modify files. | |
CVE-2000-0661 | | 2000-07-10 | WircSrv IRC Server 5.07s allows remote attackers to cause a denial of service via a long string to the server port. | |
CVE-2000-0635 | | 2000-07-10 | The view_page.html sample page in the MiniVend shopping cart program allows remote attackers to execute arbitrary commands via shell metacharacters. | |
CVE-2000-0614 | | 2000-07-10 | Tnef program in Linux systems allows remote attackers to overwrite arbitrary files via TNEF encoded compressed attachments which specify absolute path names fo… | |
CVE-2000-0605 | | 2000-07-10 | Blackboard CourseInfo 4.0 stores the local and SQL administrator user names and passwords in cleartext in a registry key whose access control allows users to a… | |
CVE-2000-0641 | | 2000-07-08 | Savant web server allows remote attackers to execute arbitrary commands via a long GET request. | |
CVE-2000-0640 | | 2000-07-08 | Guild FTPd allows remote attackers to determine the existence of files outside the FTP root via a .. (dot dot) attack, which provides different error messages… | |
CVE-2000-0651 | | 2000-07-07 | The ClientTrust program in Novell BorderManager does not properly verify the origin of authentication requests, which could allow remote attackers to impersona… | |
CVE-2000-0603 | | 2000-07-07 | Microsoft SQL Server 7.0 allows a local user to bypass permissions for stored procedures by referencing them via a temporary stored procedure, aka the "Stored… | |
CVE-2000-0574 | | 2000-07-07 | FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function… | |
CVE-2000-0573 | | 2000-07-07 | The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to execute arbitrary comma… | |
CVE-2000-0595 | | 2000-07-05 | libedit searches for the .editrc file in the current directory instead of the user's home directory, which may allow local users to execute arbitrary commands… | |
CVE-2000-0591 | | 2000-07-05 | Novell BorderManager 3.0 and 3.5 allows remote attackers to bypass URL filtering by encoding characters in the requested URL. | |
CVE-2000-0576 | | 2000-07-05 | Oracle Web Listener for AIX versions 4.0.7.0.0 and 4.0.8.1.0 allows remote attackers to cause a denial of service via a malformed URL. | |
CVE-2000-0575 | | 2000-07-05 | SSH 1.2.27 with Kerberos authentication support stores Kerberos tickets in a file which is created in the current directory of the user who is logging in, whic… | |
CVE-2000-0572 | | 2000-07-05 | The Razor configuration management tool uses weak encryption for its password file, which allows local users to gain privileges. | |
CVE-2000-0571 | | 2000-07-05 | LocalWEB HTTP server 1.2.0 allows remote attackers to cause a denial of service via a long GET request. | |
CVE-2000-0594 | | 2000-07-04 | BitchX IRC client does not properly cleanse an untrusted format string, which allows remote attackers to cause a denial of service via an invite to a channel w… | |
CVE-2000-0590 | | 2000-07-04 | Poll It 2.0 CGI script allows remote attackers to read arbitrary files by specifying the file name in the data_dir parameter. | |
CVE-2000-0566 | | 2000-07-03 | makewhatis in Linux man package allows local users to overwrite files via a symlink attack. | |
CVE-2000-0584 | | 2000-07-02 | Buffer overflow in Canna input system allows remote attackers to execute arbitrary commands via an SR_INIT command with a long user name or group name. | |
CVE-2000-0583 | | 2000-06-30 | vchkpw program in vpopmail before version 4.8 does not properly cleanse an untrusted format string used in a call to syslog, which allows remote attackers to c… | |
CVE-2000-0582 | | 2000-06-30 | Check Point FireWall-1 4.0 and 4.1 allows remote attackers to cause a denial of service by sending a stream of invalid commands (such as binary zeros) to the S… | |
CVE-2000-0581 | | 2000-06-30 | Windows 2000 Telnet Server allows remote attackers to cause a denial of service by sending a continuous stream of binary zeros, which causes the server to cras… | |
CVE-2000-0580 | | 2000-06-30 | Windows 2000 Server allows remote attackers to cause a denial of service by sending a continuous stream of binary zeros to various TCP and UDP ports, which sig… | |
CVE-2000-0569 | | 2000-06-30 | Sybergen Sygate allows remote attackers to cause a denial of service by sending a malformed DNS UDP packet to its internal interface. | |
CVE-2000-0568 | | 2000-06-30 | Sybergen Secure Desktop 2.1 does not properly protect against false router advertisements (ICMP type 9), which allows remote attackers to modify default routes. | |
CVE-2000-0612 | | 2000-06-29 | Windows 95 and Windows 98 do not properly process spoofed ARP packets, which allows remote attackers to overwrite static entries in the cache table. | |
CVE-2000-0599 | | 2000-06-29 | Buffer overflow in iMesh 1.02 allows remote attackers to execute arbitrary commands via a long string to the iMesh port. | |
CVE-2000-0586 | | 2000-06-29 | Buffer overflow in Dalnet IRC server 4.6.5 allows remote attackers to cause a denial of service or execute arbitrary commands via the SUMMON command. | |
CVE-2000-0597 | | 2000-06-27 | Microsoft Office 2000 (Excel and PowerPoint) and PowerPoint 97 are marked as safe for scripting, which allows remote attackers to force Internet Explorer or so… | |
CVE-2000-0596 | | 2000-06-27 | Internet Explorer 5.x does not warn a user before opening a Microsoft Access database file that is referenced within ActiveX OBJECT tags in an HTML document, w… | |
CVE-2000-0593 | | 2000-06-27 | WinProxy 2.0 and 2.0.1 allows remote attackers to cause a denial of service by sending an HTTP GET request without listing an HTTP version number. | |
CVE-2000-0592 | | 2000-06-27 | Buffer overflows in POP3 service in WinProxy 2.0 and 2.0.1 allow remote attackers to execute arbitrary commands via long USER, PASS, LIST, RETR, or DELE comman… | |
CVE-2000-0570 | | 2000-06-27 | FirstClass Internet Services server 5.770, and other versions before 6.1, allows remote attackers to cause a denial of service by sending an email with a long… | |
CVE-2000-0616 | | 2000-06-26 | Vulnerability in HP TurboIMAGE DBUTIL allows local users to gain additional privileges via DBUTIL.PUB.SYS. | |
CVE-2000-0600 | | 2000-06-26 | Netscape Enterprise Server in NetWare 5.1 allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed URL. | |
CVE-2000-0598 | | 2000-06-26 | Fortech Proxy+ allows remote attackers to bypass access restrictions for to the administration service by redirecting their connections through the telnet prox… | |
CVE-2000-0589 | | 2000-06-26 | SawMill 5.0.21 uses weak encryption to store passwords, which allows attackers to easily decrypt the password and modify the SawMill configuration. | |
CVE-2000-0588 | | 2000-06-26 | SawMill 5.0.21 CGI program allows remote attackers to read the first line of arbitrary files by listing the file in the rfcf parameter, whose contents SawMill… | |
CVE-2000-0587 | | 2000-06-26 | The privpath directive in glftpd 1.18 allows remote attackers to bypass access restrictions for directories by using the file name completion capability. | |
CVE-2000-0601 | | 2000-06-25 | LeafChat 1.7 IRC client allows a remote IRC server to cause a denial of service by rapidly sending a large amount of error messages. | |
CVE-2000-0585 | | 2000-06-24 | ISC DHCP client program dhclient allows remote attackers to execute arbitrary commands via shell metacharacters. | |
CVE-2000-0611 | | 2000-06-23 | The default configuration of NetWin dMailWeb and cwMail trusts all POP servers, which allows attackers to bypass normal authentication and cause a denial of se… | |
CVE-2000-0610 | | 2000-06-23 | NetWin dMailWeb and cwMail 2.6g and earlier allows remote attackers to bypass authentication and use the server for mail relay via a username that contains a c… | |
CVE-2000-0618 | | 2000-06-22 | Buffer overflow in xconq and cconq game programs on Red Hat Linux allows local users to gain additional privileges via long DISPLAY environmental variable. | |
CVE-2000-0617 | | 2000-06-22 | Buffer overflow in xconq and cconq game programs on Red Hat Linux allows local users to gain additional privileges via long USER environmental variable. | |
CVE-2000-0562 | | 2000-06-22 | BlackIce Defender 2.1 and earlier, and BlackIce Pro 2.0.23 and earlier, do not properly block Back Orifice traffic when the security setting is Nervous or lowe… | |
CVE-2000-0540 | | 2000-06-22 | JSP sample files in Allaire JRun 2.3.x allow remote attackers to access arbitrary files (e.g. via viewsource.jsp) or obtain configuration information. | |
CVE-2000-0539 | | 2000-06-22 | Servlet examples in Allaire JRun 2.3.x allow remote attackers to obtain sensitive information, e.g. listing HttpSession ID's via the SessionServlet servlet. | |
CVE-2000-0609 | | 2000-06-21 | NetWin dMailWeb and cwMail 2.6g and earlier allows remote attackers to cause a denial of service via a long username parameter. | |
CVE-2000-0608 | | 2000-06-21 | NetWin dMailWeb and cwMail 2.6i and earlier allows remote attackers to cause a denial of service via a long POP parameter (pophost). | |
CVE-2000-0607 | | 2000-06-21 | Buffer overflow in fld program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges via an input file containing long CHARS… | |
CVE-2000-0606 | | 2000-06-21 | Buffer overflow in kon program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges via a long -StartupMessage parameter. | |
CVE-2000-0604 | | 2000-06-21 | gkermit in Red Hat Linux is improperly installed with setgid uucp, which allows local users to modify files owned by uucp. | |
CVE-2000-0602 | | 2000-06-21 | Secure Locate (slocate) in Red Hat Linux allows local users to gain privileges via a malformed configuration file that is specified in the LOCATE_PATH environm… | |
CVE-2000-0579 | | 2000-06-21 | IRIX crontab creates temporary files with predictable file names and with the umask of the user, which could allow local users to modify another user's crontab… | |
CVE-2000-0578 | | 2000-06-21 | SGI MIPSPro compilers C, C++, F77 and F90 generate temporary files in /tmp with predictable file names, which could allow local users to insert malicious conte… | |
CVE-2000-0577 | | 2000-06-21 | Netscape Professional Services FTP Server 1.3.6 allows remote attackers to read arbitrary files via a .. (dot dot) attack. | |
CVE-2000-0513 | | 2000-06-21 | CUPS (Common Unix Printing System) 1.04 and earlier allows remote attackers to cause a denial of service by authenticating with a user name that does not exist… | |
CVE-2000-0511 | | 2000-06-21 | CUPS (Common Unix Printing System) 1.04 and earlier allows remote attackers to cause a denial of service via a CGI POST request. | |
CVE-2000-0510 | | 2000-06-21 | CUPS (Common Unix Printing System) 1.04 and earlier allows remote attackers to cause a denial of service via a malformed IPP request. | |
CVE-2000-0500 | | 2000-06-21 | The default configuration of BEA WebLogic 5.1.0 allows a remote attacker to view source code of programs by requesting a URL beginning with /file/, which cause… | |
CVE-2000-0533 | | 2000-06-20 | Vulnerability in cvconnect in SGI IRIX WorkShop allows local users to overwrite arbitrary files. | |
CVE-2000-0466 | | 2000-06-20 | AIX cdmount allows local users to gain root privileges via shell metacharacters. | |
CVE-2000-0620 | | 2000-06-19 | libX11 X library allows remote attackers to cause a denial of service via a resource mask of 0, which causes libX11 to go into an infinite loop. | |
CVE-2000-0561 | | 2000-06-19 | Buffer overflow in WebBBS 1.15 allows remote attackers to execute arbitrary commands via a long HTTP GET request. | |
CVE-2000-0529 | | 2000-06-19 | Net Tools PKI Server allows remote attackers to cause a denial of service via a long HTTP request. | |
CVE-2000-0528 | | 2000-06-19 | Net Tools PKI Server does not properly restrict access to remote attackers when the XUDA template files do not contain absolute pathnames for other files. | |
CVE-2000-0504 | | 2000-06-19 | libICE in XFree86 allows remote attackers to cause a denial of service by specifying a large value which is not properly checked by the SKIP_STRING macro. | |
CVE-2000-0541 | | 2000-06-17 | The Panda Antivirus console on port 2001 allows local users to execute arbitrary commands without authentication via the CMD command. |