2000 CVEs (page 9)
Page 9 of 13 — CVEs published in 2000, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2000-0451 | | 2000-05-19 | The Intel express 8100 ISDN router allows remote attackers to cause a denial of service via oversized or fragmented ICMP packets. | |
CVE-2000-0436 | | 2000-05-19 | MetaProducts Offline Explorer 1.2 and earlier allows remote attackers to access arbitrary files via a .. (dot dot) attack. | |
CVE-2000-0305 | | 2000-05-19 | Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a denial of service by sending a large numbe… | |
CVE-2000-0463 | | 2000-05-18 | BeOS 5.0 allows remote attackers to cause a denial of service via fragmented TCP packets. | |
CVE-2000-0453 | | 2000-05-18 | XFree86 3.3.x and 4.0 allows a user to cause a denial of service via a negative counter value in a malformed TCP packet that is sent to port 6000. | |
CVE-2000-0452 | | 2000-05-18 | Buffer overflow in the ESMTP service of Lotus Domino Server 5.0.1 allows remote attackers to cause a denial of service via a long MAIL FROM command. | |
CVE-2000-0450 | | 2000-05-18 | Vulnerability in bbd server in Big Brother System and Network Monitor allows an attacker to execute arbitrary commands. | |
CVE-2000-0437 | | 2000-05-18 | Buffer overflow in the CyberPatrol daemon "cyberdaemon" used in gauntlet and WebShield allows remote attackers to cause a denial of service or execute arbitrar… | |
CVE-2000-0394 | | 2000-05-18 | NetProwler 3.0 allows remote attackers to cause a denial of service by sending malformed IP packets that trigger NetProwler's Man-in-the-Middle signature. | |
CVE-2000-0465 | | 2000-05-17 | Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read client files via… | |
CVE-2000-0464 | | 2000-05-17 | Internet Explorer 4.x and 5.x allows remote attackers to execute arbitrary commands via a buffer overflow in the ActiveX parameter parsing capability, aka the… | |
CVE-2000-0417 | | 2000-05-17 | The HTTP administration interface to the Cayman 3220-H DSL router allows remote attackers to cause a denial of service via a long username or password. | |
CVE-2000-0350 | | 2000-05-17 | A debugging feature in NetworkICE ICEcap 2.0.23 and earlier is enabled, which allows a remote attacker to bypass the weak authentication and post unencrypted e… | |
CVE-2000-0432 | | 2000-05-16 | The calender.pl and the calendar_admin.pl calendar scripts by Matt Kruse allow remote attackers to execute arbitrary commands via shell metacharacters. | |
CVE-2000-0405 | | 2000-05-16 | Buffer overflow in L0pht AntiSniff allows remote attackers to execute arbitrary commands via a malformed DNS response packet. | |
CVE-2000-0395 | | 2000-05-16 | Buffer overflow in CProxy 3.3 allows remote users to cause a denial of service via a long HTTP request. | |
CVE-2000-0393 | | 2000-05-16 | The KDE kscd program does not drop privileges when executing a program specified in a user's SHELL environmental variable, which allows the user to gain privil… | |
CVE-2000-0392 | | 2000-05-16 | Buffer overflow in ksu in Kerberos 5 allows local users to gain root privileges. | |
CVE-2000-0391 | | 2000-05-16 | Buffer overflow in krshd in Kerberos 5 allows remote attackers to gain root privileges. | |
CVE-2000-0390 | | 2000-05-16 | Buffer overflow in krb425_conv_principal function in Kerberos 5 allows remote attackers to gain root privileges. | |
CVE-2000-0389 | | 2000-05-16 | Buffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root privileges. | |
CVE-2000-0379 | | 2000-05-16 | The Netopia R9100 router does not prevent authenticated users from modifying SNMP tables, even if the administrator has configured it to do so. | |
CVE-2000-0424 | | 2000-05-15 | The CGI counter 4.0.7 by George Burgyan allows remote attackers to execute arbitrary commands via shell metacharacters. | |
CVE-2000-0397 | | 2000-05-15 | The EMURL web-based email account software encodes predictable identifiers in user session URLs, which allows a remote attacker to access a user's email accoun… | |
CVE-2000-0435 | | 2000-05-13 | The allmanageup.pl file upload CGI script in the Allmanage Website administration software 2.6 can be called directly by remote attackers, which allows them to… | |
CVE-2000-0434 | | 2000-05-13 | The administrative password for the Allmanage web site administration software is stored in plaintext in a file which could be accessed by remote attackers. | |
CVE-2000-0400 | | 2000-05-13 | The Microsoft Active Movie ActiveX Control in Internet Explorer 5 does not restrict which file types can be downloaded, which allows an attacker to download an… | |
CVE-2000-0415 | | 2000-05-12 | Buffer overflow in Outlook Express 4.x allows attackers to cause a denial of service via a mail or news message that has a .jpg or .bmp attachment with a long… | |
CVE-2000-0407 | | 2000-05-12 | Buffer overflow in Solaris netpr program allows local users to execute arbitrary commands via a long -p option. | |
CVE-2000-0457 | | 2000-05-11 | ISM.DLL in IIS 4.0 and 5.0 allows remote attackers to read file contents by requesting the file and appending a large number of encoded spaces (%20) and termin… | |
CVE-2000-0439 | | 2000-05-11 | Internet Explorer 4.0 and 5.0 allows a malicious web site to obtain client cookies from another domain by including that domain name and escaped characters in… | |
CVE-2000-0421 | | 2000-05-11 | The process_bug.cgi script in Bugzilla allows remote attackers to execute arbitrary commands via shell metacharacters. | |
CVE-2000-0420 | | 2000-05-11 | The default configuration of SYSKEY in Windows 2000 stores the startup key in the registry, which could allow an attacker tor ecover it and use it to decrypt E… | |
CVE-2000-0419 | | 2000-05-11 | The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthorized activities via the "Show Me" functi… | |
CVE-2000-0416 | | 2000-05-11 | NTMail 5.x allows network users to bypass the NTMail proxy restrictions by redirecting their requests to NTMail's web configuration server. | |
CVE-2000-0408 | | 2000-05-11 | IIS 4.05 and 5.0 allow remote attackers to cause a denial of service via a long, complex URL that appears to contain a large number of file extensions, aka the… | |
CVE-2000-0411 | | 2000-05-10 | Matt Wright's FormMail CGI script allows remote attackers to obtain environmental variables via the env_report parameter. | |
CVE-2000-0410 | | 2000-05-10 | ColdFusion Server 4.5.1 allows remote attackers to cause a denial of service by making repeated requests to a CFCACHE tagged cache file that is not stored in m… | |
CVE-2000-0409 | | 2000-05-10 | Netscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local users to overwrite files of the user importing the certificate. | |
CVE-2000-0406 | | 2000-05-10 | Netscape Communicator before version 4.73 and Navigator 4.07 do not properly validate SSL certificates, which allows remote attackers to steal information by r… | |
CVE-2000-0304 | | 2000-05-10 | Microsoft IIS 4.0 and 5.0 with the IISADMPWD virtual directory installed allows a remote attacker to cause a denial of service via a malformed request to the i… | |
CVE-2000-0387 | | 2000-05-09 | The makelev program in the golddig game from the FreeBSD ports collection allows local users to overwrite arbitrary files. | |
CVE-2000-0384 | | 2000-05-08 | NetStructure 7110 and 7180 have undocumented accounts (servnow, root, and wizard) whose passwords are easily guessable from the NetStructure's MAC address, whi… | |
CVE-2000-0383 | | 2000-05-08 | The file transfer component of AOL Instant Messenger (AIM) reveals the physical path of the transferred file to the remote recipient. | |
CVE-2000-0382 | | 2000-05-08 | ColdFusion ClusterCATS appends stale query string arguments to a URL during HTML redirection, which may provide sensitive information to the redirected site. | |
CVE-2000-0413 | | 2000-05-06 | The shtml.exe program in the FrontPage extensions package of IIS 4.0 and 5.0 allows remote attackers to determine the physical path of HTML, HTM, ASP, and SHTM… | |
CVE-2000-0426 | | 2000-05-05 | UltraBoard 1.6 and other versions allow remote attackers to cause a denial of service by referencing UltraBoard in the Session parameter, which causes UltraBoa… | |
CVE-2000-0423 | | 2000-05-05 | Buffer overflow in Netwin DNEWSWEB CGI program allows remote attackers to execute arbitrary commands via long parameters such as group, cmd, and utag. | |
CVE-2000-0381 | | 2000-05-05 | The Gossamer Threads DBMan db.cgi CGI script allows remote attackers to view environmental variables and setup information by referencing a non-existing databa… | |
CVE-2000-0428 | | 2000-05-04 | Buffer overflow in the SMTP gateway for InterScan Virus Wall 3.32 and earlier allows a remote attacker to execute arbitrary commands via a long filename for a… | |
CVE-2000-0427 | | 2000-05-04 | The Aladdin Knowledge Systems eToken device allows attackers with physical access to the device to obtain sensitive information without knowing the PIN of the… | |
CVE-2000-0422 | | 2000-05-04 | Buffer overflow in Netwin DMailWeb CGI program allows remote attackers to execute arbitrary commands via a long utoken parameter. | |
CVE-2000-0414 | | 2000-05-04 | Vulnerability in shutdown command for HP-UX 11.X and 10.X allows allows local users to gain privileges via malformed input variables. | |
CVE-2000-0430 | | 2000-05-03 | Cart32 allows remote attackers to access sensitive debugging information by appending /expdate to the URL request. | |
CVE-2000-0425 | | 2000-05-03 | Buffer overflow in the Web Archives component of L-Soft LISTSERV 1.8 allows remote attackers to execute arbitrary commands. | |
CVE-2000-0378 | | 2000-05-03 | The pam_console PAM module in Linux systems performs a chown on various devices upon a user login, but an open file descriptor for those devices can be maintai… | |
CVE-2000-0345 | | 2000-05-03 | The on-line help system options in Cisco routers allows non-privileged users without "enabled" access to obtain sensitive information via the show command. | |
CVE-2000-0335 | | 2000-05-03 | The resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS query results. | |
CVE-2000-0332 | | 2000-05-03 | UltraBoard.pl or UltraBoard.cgi CGI scripts in UltraBoard 1.6 allows remote attackers to read arbitrary files via a pathname string that includes a dot dot (… | |
CVE-2000-0303 | | 2000-05-03 | Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot (..) attack. | |
CVE-2000-0433 | | 2000-05-02 | The SuSE aaa_base package installs some system accounts with home directories set to /tmp, which allows local users to gain privileges to those accounts by cre… | |
CVE-2000-0386 | | 2000-05-02 | FileMaker Pro 5 Web Companion allows remote attackers to send anonymous or forged email. | |
CVE-2000-0385 | | 2000-05-02 | FileMaker Pro 5 Web Companion allows remote attackers to bypass Field-Level database security restrictions via the XML publishing or email capabilities. | |
CVE-2000-0347 | | 2000-05-02 | Windows 95 and Windows 98 allow a remote attacker to cause a denial of service via a NetBIOS session request packet with a NULL source name. | |
CVE-2000-0346 | | 2000-05-02 | AppleShare IP 6.1 and later allows a remote attacker to read potentially sensitive information via an invalid range request to the web server. | |
CVE-2000-0343 | | 2000-05-02 | Buffer overflow in Sniffit 0.3.x with the -L logging option enabled allows remote attackers to execute arbitrary commands via a long MAIL FROM mail header. | |
CVE-2000-0293 | | 2000-05-02 | aaa_base in SuSE Linux 6.3, and cron.daily in earlier versions, allow local users to delete arbitrary files by creating files whose names include spaces, which… | |
CVE-2000-0138 | | 2000-05-02 | A system has a distributed denial of service (DDOS) attack master, agent, or zombie installed, such as (1) Trinoo, (2) Tribe Flood Network (TFN), (3) Tribe Flo… | |
CVE-2000-0449 | | 2000-05-01 | Omnis Studio 2.4 uses weak encryption (trivial encoding) for encrypting database fields. | |
CVE-2000-0448 | | 2000-05-01 | The WebShield SMTP Management Tool version 4.5.44 does not properly restrict access to the management port when an IP address does not resolve to a hostname, w… | |
CVE-2000-0447 | | 2000-05-01 | Buffer overflow in WebShield SMTP 4.5.44 allows remote attackers to execute arbitrary commands via a long configuration parameter to the WebShield remote manag… | |
CVE-2000-0440 | | 2000-05-01 | NetBSD 1.4.2 and earlier allows remote attackers to cause a denial of service by sending a packet with an unaligned IP timestamp option. | |
CVE-2000-0401 | | 2000-05-01 | Buffer overflows in redirect.exe and changepw.exe in PDGSoft shopping cart allow remote attackers to execute arbitrary commands via a long query string. | |
CVE-2000-0344 | | 2000-05-01 | The knfsd NFS server in Linux kernel 2.2.x allows remote attackers to cause a denial of service via a negative size value. | |
CVE-2000-0341 | | 2000-05-01 | ATRIUM Cassandra NNTP Server 1.10 allows remote attackers to cause a denial of service via a long login name. | |
CVE-2000-0340 | | 2000-04-29 | Buffer overflow in Gnomelib in SuSE Linux 6.3 allows local users to execute arbitrary commands via the DISPLAY environmental variable. | |
CVE-2000-0342 | High | 7.5 | 2000-04-28 | Eudora 4.x allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by using a .lnk file that refers to the a… |
CVE-2000-0429 | | 2000-04-27 | A backdoor password in Cart32 3.0 and earlier allows remote attackers to execute arbitrary commands. | |
CVE-2000-0380 | | 2000-04-26 | The IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a denial of service by requesting a URL that… | |
CVE-2000-0249 | | 2000-04-26 | The AIX Fast Response Cache Accelerator (FRCA) allows local users to modify arbitrary files via the configuration capability in the frcactrl program. | |
CVE-2000-0326 | | 2000-04-25 | Meeting Maker uses weak encryption (a polyalphabetic substitution cipher) for passwords, which allows remote attackers to sniff and decrypt passwords for Meeti… | |
CVE-2000-0324 | | 2000-04-25 | pcAnywhere 8.x and 9.0 allows remote attackers to cause a denial of service via a TCP SYN scan, e.g. by nmap. | |
CVE-2000-0339 | | 2000-04-24 | ZoneAlarm 2.1.10 and earlier does not filter UDP packets with a source port of 67, which allows remote attackers to bypass the firewall rules. | |
CVE-2000-0337 | | 2000-04-24 | Buffer overflow in Xsun X server in Solaris 7 allows local users to gain root privileges via a long -dev parameter. | |
CVE-2000-0334 | | 2000-04-24 | The Allaire Spectra container editor preview tool does not properly enforce object security, which allows an attacker to conduct unauthorized activities via an… | |
CVE-2000-0322 | | 2000-04-24 | The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters. | |
CVE-2000-0321 | | 2000-04-24 | Buffer overflow in IC Radius package allows a remote attacker to cause a denial of service via a long user name. | |
CVE-2000-0317 | | 2000-04-24 | Buffer overflow in Solaris 7 lpset allows local users to gain root privileges via a long -r option. | |
CVE-2000-0316 | | 2000-04-24 | Buffer overflow in Solaris 7 lp allows local users to gain root privileges via a long -d option. | |
CVE-2000-0248 | | 2000-04-24 | The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a backdoor password that allows remote attackers to execute ar… | |
CVE-2000-0338 | Medium | 5.5 | 2000-04-23 | Concurrent Versions Software (CVS) uses predictable temporary file names for locking, which allows local users to cause a denial of service by creating the loc… |
CVE-2000-0319 | | 2000-04-23 | mail.local in Sendmail 8.10.x does not properly identify the .\n string which identifies the end of message text, which allows a remote attacker to cause a den… | |
CVE-2000-0459 | | 2000-04-22 | IMP does not remove files properly if the MSWordView application quits, which allows local users to cause a denial of service by filling up the disk space by r… | |
CVE-2000-0458 | | 2000-04-22 | The MSWordView application in IMP creates world-readable files in the /tmp directory, which allows other local users to read potentially sensitive information. | |
CVE-2000-0336 | | 2000-04-21 | Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack. | |
CVE-2000-0320 | | 2000-04-21 | Qpopper 2.53 and 3.0 does not properly identify the \n string which identifies the end of message text, which allows a remote attacker to cause a denial of ser… | |
CVE-2000-0318 | | 2000-04-21 | Atrium Mercur Mail Server 3.2 allows local attackers to read other user's email and create arbitrary files via a dot dot (..) attack. | |
CVE-2000-0295 | | 2000-04-21 | Buffer overflow in LCDproc allows remote attackers to gain root privileges via the screen_add command. | |
CVE-2000-0331 | | 2000-04-20 | Buffer overflow in Microsoft command processor (CMD.EXE) for Windows NT and Windows 2000 allows a local user to cause a denial of service via a long environmen… | |
CVE-2000-0311 | | 2000-04-20 | The Windows 2000 domain controller allows a malicious user to modify Active Directory information by modifying an unprotected attribute, aka the "Mixed Object… |