2000 CVEs (page 8)
Page 8 of 13 — CVEs published in 2000, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2000-0512 | | 2000-06-16 | CUPS (Common Unix Printing System) 1.04 and earlier does not properly delete request files, which allows a remote attacker to cause a denial of service. | |
CVE-2000-0501 | | 2000-06-16 | Race condition in MDaemon 2.8.5.0 POP server allows local users to cause a denial of service by entering a UIDL command and quickly exiting the server. | |
CVE-2000-0494 | | 2000-06-16 | Veritas Volume Manager creates a world writable .server_pids file, which allows local users to add arbitrary commands into the file, which is then executed by… | |
CVE-2000-0480 | | 2000-06-16 | Dragon telnet server allows remote attackers to cause a denial of service via a long username. | |
CVE-2000-0479 | | 2000-06-16 | Dragon FTP server allows remote attackers to cause a denial of service via a long USER command. | |
CVE-2000-0484 | | 2000-06-15 | Small HTTP Server ver 3.06 contains a memory corruption bug causing a memory overflow. The overflowed buffer crashes into a Structured Exception Handler result… | |
CVE-2000-0483 | | 2000-06-15 | The DocumentTemplate package in Zope 2.2 and earlier allows a remote attacker to modify DTMLDocuments or DTMLMethods without authorization. | |
CVE-2000-0475 | | 2000-06-15 | Windows 2000 allows a local user process to access another user's desktop within the same windows station, aka the "Desktop Separation" vulnerability. | |
CVE-2000-0473 | | 2000-06-15 | Buffer overflow in AnalogX SimpleServer 1.05 allows a remote attacker to cause a denial of service via a long GET request for a program in the cgi-bin director… | |
CVE-2000-0543 | | 2000-06-14 | The command port for PGP Certificate Server 2.5.0 and 2.5.1 allows remote attackers to cause a denial of service if their hostname does not have a reverse DNS… | |
CVE-2000-0514 | | 2000-06-14 | GSSFTP FTP daemon in Kerberos 5 1.1.x does not properly restrict access to some FTP commands, which allows remote attackers to cause a denial of service, and l… | |
CVE-2000-0478 | | 2000-06-14 | In some cases, Norton Antivirus for Exchange (NavExchange) enters a "fail-open" state which allows viruses to pass through the server. | |
CVE-2000-0477 | | 2000-06-14 | Buffer overflow in Norton Antivirus for Exchange (NavExchange) allows remote attackers to cause a denial of service via a .zip file that contains long file nam… | |
CVE-2000-0471 | | 2000-06-14 | Buffer overflow in ufsrestore in Solaris 8 and earlier allows local users to gain root privileges via a long pathname. | |
CVE-2000-0565 | | 2000-06-13 | SmartFTP Daemon 0.2 allows a local user to access arbitrary files by uploading and specifying an alternate user configuration file via a .. (dot dot) attack. | |
CVE-2000-0542 | | 2000-06-13 | Tigris remote access server before 11.5.4.22 does not properly record Radius accounting information when a user fails the initial login authentication but subs… | |
CVE-2000-0535 | | 2000-06-12 | OpenSSL 0.9.4 and OpenSSH for FreeBSD do not properly check for the existence of the /dev/random or /dev/urandom devices, which are absent on FreeBSD Alpha sys… | |
CVE-2000-0639 | | 2000-06-11 | The default configuration of Big Brother 1.4h2 and earlier does not include proper access restrictions, which allows remote attackers to execute arbitrary comm… | |
CVE-2000-0555 | | 2000-06-09 | Ceilidh allows remote attackers to cause a denial of service via a large number of POST requests. | |
CVE-2000-0550 | | 2000-06-09 | Kerberos 4 KDC program improperly frees memory twice (aka "double-free"), which allows remote attackers to cause a denial of service. | |
CVE-2000-0549 | | 2000-06-09 | Kerberos 4 KDC program does not properly check for null termination of AUTH_MSG_KDC_REQUEST requests, which allows remote attackers to cause a denial of servic… | |
CVE-2000-0548 | | 2000-06-09 | Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the e_msg variable in the kerb_err_reply function. | |
CVE-2000-0547 | | 2000-06-09 | Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the localrealm variable in the process_v4 function. | |
CVE-2000-0546 | | 2000-06-09 | Buffer overflow in Kerberos 4 KDC program allows remote attackers to cause a denial of service via the lastrealm variable in the set_tgtkey function. | |
CVE-2000-0527 | | 2000-06-09 | userreg.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters. | |
CVE-2000-0526 | | 2000-06-09 | mailview.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack. | |
CVE-2000-0506 | | 2000-06-09 | The "capabilities" feature in Linux before 2.2.16 allows local users to cause a denial of service or gain privileges by setting the capabilities to prevent a s… | |
CVE-2000-0554 | | 2000-06-08 | Ceilidh allows remote attackers to obtain the real path of the Ceilidh directory via the translated_path hidden form field. | |
CVE-2000-0525 | | 2000-06-08 | OpenSSH does not properly drop privileges when the UseLogin option is enabled, which allows local users to execute arbitrary commands by providing the command… | |
CVE-2000-0522 | | 2000-06-08 | RSA ACE/Server allows remote attackers to cause a denial of service by flooding the server's authentication request port with UDP packets, which causes the ser… | |
CVE-2000-0502 | | 2000-06-08 | Mcafee VirusScan 4.03 does not properly restrict access to the alert text file before it is sent to the Central Alert Server, which allows local users to modif… | |
CVE-2000-0499 | High | 7.5 | 2000-06-08 | The default configuration of BEA WebLogic 3.1.8 through 4.5.1 allows a remote attacker to view source code of a JSP program by requesting a URL which provides… |
CVE-2000-0498 | High | 7.5 | 2000-06-08 | Unify eWave ServletExec allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case. |
CVE-2000-0497 | High | 7.5 | 2000-06-08 | IBM WebSphere server 3.0.2 allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case. |
CVE-2000-0377 | | 2000-06-08 | The Remote Registry server in Windows NT 4.0 allows local authenticated users to cause a denial of service via a malformed request, which causes the winlogon p… | |
CVE-2000-0559 | | 2000-06-07 | eTrust Intrusion Detection System (formerly SessionWall-3) uses weak encryption (XOR) to store administrative passwords in the registry, which allows local use… | |
CVE-2000-0538 | | 2000-06-07 | ColdFusion Administrator for ColdFusion 4.5.1 and earlier allows remote attackers to cause a denial of service via a long login password. | |
CVE-2000-0534 | | 2000-06-07 | The apsfilter software in the FreeBSD ports package does not properly read user filter configurations, which allows local users to execute commands as the lpd… | |
CVE-2000-0532 | | 2000-06-07 | A FreeBSD patch for SSH on 2000-01-14 configures ssh to listen on port 722 as well as port 22, which might allow remote attackers to access SSH through port 72… | |
CVE-2000-0520 | | 2000-06-07 | Buffer overflow in restore program 0.4b17 and earlier in dump package allows local users to execute arbitrary commands via a long tape name. | |
CVE-2000-0515 | | 2000-06-07 | The snmpd.conf configuration file for the SNMP daemon (snmpd) in HP-UX 11.0 is world writable, which allows local users to modify SNMP configuration or gain pr… | |
CVE-2000-0376 | | 2000-06-07 | Buffer overflow in the HTTP proxy server for the i-drive Filo software allows remote attackers to execute arbitrary commands via a long HTTP GET request. | |
CVE-2000-0558 | | 2000-06-06 | Buffer overflow in HP Openview Network Node Manager 6.1 allows remote attackers to execute arbitrary commands via the Alarm service (OVALARMSRV) on port 2345. | |
CVE-2000-0552 | Medium | 5.5 | 2000-06-06 | ICQwebmail client for ICQ 2000A creates a world readable temporary file during login and does not delete it, which allows local users to obtain sensitive infor… |
CVE-2000-0523 | | 2000-06-06 | Buffer overflow in the logging feature of EServ 2.9.2 and earlier allows an attacker to execute arbitrary commands via a long MKD command. | |
CVE-2000-0516 | | 2000-06-06 | When configured to store configuration information in an LDAP directory, Shiva Access Manager 5.0.0 stores the root DN (Distinguished Name) name and password i… | |
CVE-2000-0503 | | 2000-06-06 | The IFRAME of the WebBrowser control in Internet Explorer 5.01 allows a remote attacker to violate the cross frame security policy via the NavigateComplete2 ev… | |
CVE-2000-0482 | | 2000-06-06 | Check Point Firewall-1 allows remote attackers to cause a denial of service by sending a large number of malformed fragmented IP packets. | |
CVE-2000-0557 | | 2000-06-05 | Buffer overflow in the web interface for Cmail 2.4.7 allows remote attackers to execute arbitrary commands via a long GET request. | |
CVE-2000-0556 | | 2000-06-05 | Buffer overflow in the web interface for Cmail 2.4.7 allows remote attackers to cause a denial of service by sending a large user name to the user dialog runni… | |
CVE-2000-0544 | | 2000-06-05 | Windows NT and Windows 2000 hosts allow a remote attacker to cause a denial of service via malformed DCE/RPC SMBwriteX requests that contain an invalid data le… | |
CVE-2000-0537 | | 2000-06-05 | BRU backup software allows local users to append data to arbitrary files by specifying an alternate configuration file with the BRUEXECLOG environmental variab… | |
CVE-2000-0524 | | 2000-06-05 | Microsoft Outlook and Outlook Express allow remote attackers to cause a denial of service by sending email messages with blank fields such as BCC, Reply-To, Re… | |
CVE-2000-0521 | | 2000-06-05 | Savant web server allows remote attackers to read source code of CGI scripts via a GET request that does not include the HTTP version number. | |
CVE-2000-0519 | | 2000-06-05 | Internet Explorer 4.x and 5.x does not properly re-validate an SSL certificate if the user establishes a new SSL session with the same server during the same I… | |
CVE-2000-0518 | | 2000-06-05 | Internet Explorer 4.x and 5.x does not properly verify all contents of an SSL certificate if a connection is made to the server via an image or a frame, aka on… | |
CVE-2000-0536 | | 2000-06-04 | xinetd 2.1.8.x does not properly restrict connections if hostnames are used for access control and the connecting host does not have a reverse DNS entry. | |
CVE-2000-0492 | | 2000-06-04 | PassWD 1.2 uses weak encryption (trivial encoding) to store passwords, which allows an attacker who can read the password file to easliy decrypt the passwords. | |
CVE-2000-0468 | | 2000-06-02 | man in HP-UX 10.20 and 11 allows local attackers to overwrite files via a symlink attack. | |
CVE-2000-0509 | | 2000-06-01 | Buffer overflows in the finger and whois demonstration scripts in Sambar Server 4.3 allow remote attackers to execute arbitrary commands via a long hostname. | |
CVE-2000-0507 | | 2000-06-01 | Imate Webmail Server 2.5 allows remote attackers to cause a denial of service via a long HELO command. | |
CVE-2000-0493 | | 2000-06-01 | Buffer overflow in Simple Network Time Sync (SMTS) daemon allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a lo… | |
CVE-2000-0490 | | 2000-06-01 | Buffer overflow in the NetWin DSMTP 2.7q in the NetWin dmail package allows remote attackers to execute arbitrary commands via a long ETRN request. | |
CVE-2000-0487 | | 2000-06-01 | The Protected Store in Windows 2000 does not properly select the strongest encryption when available, which causes it to use a default of 40-bit encryption ins… | |
CVE-2000-0476 | | 2000-06-01 | xterm, Eterm, and rxvt allow an attacker to cause a denial of service by embedding certain escape characters which force the window to be resized. | |
CVE-2000-0474 | | 2000-06-01 | Real Networks RealServer 7.x allows remote attackers to cause a denial of service via a malformed request for a page in the viewsource directory. | |
CVE-2000-0470 | | 2000-06-01 | Allegro RomPager HTTP server allows remote attackers to cause a denial of service via a malformed authentication request. | |
CVE-2000-0467 | | 2000-06-01 | Buffer overflow in Linux splitvt 1.6.3 and earlier allows local users to gain root privileges via a long password in the screen locking function. | |
CVE-2000-0530 | | 2000-05-31 | The KApplication class in the KDE 1.1.2 configuration file management capability allows local users to overwrite arbitrary files. | |
CVE-2000-0505 | | 2000-05-31 | The Apache 1.3.x HTTP server for Windows platforms allows remote attackers to list directory contents by requesting a URL containing a large number of / charac… | |
CVE-2000-0495 | | 2000-05-30 | Microsoft Windows Media Encoder allows remote attackers to cause a denial of service via a malformed request, aka the "Malformed Windows Media Encoder Request"… | |
CVE-2000-0488 | | 2000-05-30 | Buffer overflow in ITHouse mail server 1.04 allows remote attackers to execute arbitrary commands via a long RCPT TO mail command. | |
CVE-2000-0486 | | 2000-05-30 | Buffer overflow in Cisco TACACS+ tac_plus server allows remote attackers to cause a denial of service via a malformed packet with a long length field. | |
CVE-2000-0485 | | 2000-05-30 | Microsoft SQL Server allows local users to obtain database passwords via the Data Transformation Service (DTS) package Properties dialog, aka the "DTS Password… | |
CVE-2000-0402 | | 2000-05-30 | The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in plaintext in a log file which is readable… | |
CVE-2000-0564 | | 2000-05-29 | The guestbook CGI program in ICQ Web Front service for ICQ 2000a, 99b, and others allows remote attackers to cause a denial of service via a URL with a long na… | |
CVE-2000-0461 | | 2000-05-29 | The undocumented semconfig system call in BSD freezes the state of semaphores, which allows local users to cause a denial of service of the semaphore system by… | |
CVE-2000-0455 | | 2000-05-29 | Buffer overflow in xlockmore xlock program version 4.16 and earlier allows local users to read sensitive data from memory via a long -mode option. | |
CVE-2000-0454 | | 2000-05-29 | Buffer overflow in Linux cdrecord allows local users to gain privileges via the dev parameter. | |
CVE-2000-0462 | | 2000-05-28 | ftpd in NetBSD 1.4.2 does not properly parse entries in /etc/ftpchroot and does not chroot the specified users, which allows those users to access other files… | |
CVE-2000-0456 | | 2000-05-28 | NetBSD 1.4.2 and earlier allows local users to cause a denial of service by repeatedly running certain system calls in the kernel which do not yield the CPU, a… | |
CVE-2000-0460 | | 2000-05-27 | Buffer overflow in KDE kdesud on Linux allows local uses to gain privileges via a long DISPLAY environmental variable. | |
CVE-2000-0553 | | 2000-05-26 | Race condition in IPFilter firewall 3.4.3 and earlier, when configured with overlapping "return-rst" and "keep state" rules, allows remote attackers to bypass… | |
CVE-2000-0517 | | 2000-05-26 | Netscape 4.73 and earlier does not properly warn users about a potentially invalid certificate if the user has previously accepted the certificate for a differ… | |
CVE-2000-0404 | | 2000-05-25 | The CIFS Computer Browser service allows remote attackers to cause a denial of service by sending a ResetBrowser frame to the Master Browser, aka the "ResetBro… | |
CVE-2000-0403 | | 2000-05-25 | The CIFS Computer Browser service on Windows NT 4.0 allows a remote attacker to cause a denial of service by sending a large number of host announcement reques… | |
CVE-2000-0491 | | 2000-05-24 | Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to execute arbitrary commands or cause a denial of service via… | |
CVE-2000-0446 | | 2000-05-24 | Buffer overflow in MDBMS database server allows remote attackers to execute arbitrary commands via a long string. | |
CVE-2000-0445 | | 2000-05-24 | The pgpk command in PGP 5.x on Unix systems uses an insufficiently random data source for non-interactive key pair generation, which may produce predictable ke… | |
CVE-2000-0444 | | 2000-05-24 | HP Web JetAdmin 6.0 allows remote attackers to cause a denial of service via a malformed URL to port 8000. | |
CVE-2000-0443 | | 2000-05-24 | The web interface server in HP Web JetAdmin 5.6 allows remote attackers to read arbitrary files via a .. (dot dot) attack. | |
CVE-2000-0442 | | 2000-05-24 | Qpopper 2.53 and earlier allows local users to gain privileges via a formatting string in the From: header, which is processed by the euidl command. | |
CVE-2000-0441 | | 2000-05-24 | Vulnerability in AIX 3.2.x and 4.x allows local users to gain write access to files on locally or remotely mounted AIX filesystems. | |
CVE-2000-0399 | | 2000-05-24 | Buffer overflow in MDaemon POP server allows remote attackers to cause a denial of service via a long user name. | |
CVE-2000-0398 | | 2000-05-24 | Buffer overflow in wconsole.dll in Rockliffe MailSite Management Agent allows remote attackers to execute arbitrary commands via a long query_string parameter… | |
CVE-2000-0396 | | 2000-05-24 | The add.exe program in the Carello shopping cart software allows remote attackers to duplicate files on the server, which could allow the attacker to read sour… | |
CVE-2000-0551 | | 2000-05-23 | The file transfer mechanism in Danware NetOp 6.0 does not provide authentication, which allows remote attackers to access and modify arbitrary files. | |
CVE-2000-0418 | | 2000-05-23 | The Cayman 3220-H DSL router allows remote attackers to cause a denial of service via oversized ICMP echo (ping) requests. | |
CVE-2000-0438 | | 2000-05-22 | Buffer overflow in fdmount on Linux systems allows local users in the "floppy" group to execute arbitrary commands via a long mountpoint parameter. | |
CVE-2000-0431 | | 2000-05-22 | Cobalt RaQ2 and RaQ3 does not properly set the access permissions and ownership for files that are uploaded via FrontPage, which allows attackers to bypass cgi… |