CVE-2000-0xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
990 records · Page 7 of 10
Buffer overflow in krb425_conv_principal function in Kerberos 5 allows remote attackers to gain root privileges.
UpdatedBuffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root privileges.
UpdatedBuffer overflow in FreeBSD libmytinfo library allows local users to execute commands via a long TERMCAP environmental variable.
UpdatedThe makelev program in the golddig game from the FreeBSD ports collection allows local users to overwrite arbitrary files.
UpdatedFileMaker Pro 5 Web Companion allows remote attackers to send anonymous or forged email.
UpdatedFileMaker Pro 5 Web Companion allows remote attackers to bypass Field-Level database security restrictions via the XML publishing or email capabilities.
UpdatedNetStructure 7110 and 7180 have undocumented accounts (servnow, root, and wizard) whose passwords are easily guessable from the NetStructure's MAC address, which could allow remote attackers to gain root access.
UpdatedThe file transfer component of AOL Instant Messenger (AIM) reveals the physical path of the transferred file to the remote recipient.
UpdatedColdFusion ClusterCATS appends stale query string arguments to a URL during HTML redirection, which may provide sensitive information to the redirected site.
UpdatedThe Gossamer Threads DBMan db.cgi CGI script allows remote attackers to view environmental variables and setup information by referencing a non-existing database in the db parameter.
UpdatedThe IOS HTTP service in Cisco routers and switches running IOS 11.1 through 12.1 allows remote attackers to cause a denial of service by requesting a URL that contains a %% string.
UpdatedThe Netopia R9100 router does not prevent authenticated users from modifying SNMP tables, even if the administrator has configured it to do so.
UpdatedThe pam_console PAM module in Linux systems performs a chown on various devices upon a user login, but an open file descriptor for those devices can be maintained after the user logs out, which allows that user to sniff activity on these devices when subsequent users log in.
UpdatedThe Remote Registry server in Windows NT 4.0 allows local authenticated users to cause a denial of service via a malformed request, which causes the winlogon process to fail, aka the "Remote Registry Access Authentication" vulnerability.
UpdatedBuffer overflow in the HTTP proxy server for the i-drive Filo software allows remote attackers to execute arbitrary commands via a long HTTP GET request.
UpdatedThe kernel in FreeBSD 3.2 follows symbolic links when it creates core dump files, which allows local attackers to modify arbitrary files.
UpdatedThe default configuration of kdm in Caldera and Mandrake Linux, and possibly other distributions, allows XDMCP connections from any host, which allows remote attackers to obtain sensitive information or bypass additional access restrictions.
UpdatedVulnerabilities in the KDE kvt terminal program allow local users to gain root privileges.
UpdatedVulnerability in Caldera rmt command in the dump package 0.4b4 allows a local user to gain root privileges.
UpdatedThe libmediatool library used for the KDE mediatool allows local users to create arbitrary files via a symlink attack.
UpdatedThe debug option in Caldera Linux smail allows remote attackers to execute commands via shell metacharacters in the -D option for the rmail command.
UpdatedThe IDENT server in Caldera Linux 2.3 creates multiple threads for each IDENT request, which allows remote attackers to cause a denial of service.
UpdatedClassic Cisco IOS 9.1 and later allows attackers with access to the login prompt to obtain portions of the command history of previous users, which may allow the attacker to access sensitive data.
UpdatedVulnerability in eterm 0.8.8 in Debian GNU/Linux allows an attacker to gain root privileges.
Updateddump in Debian GNU/Linux 2.1 does not properly restore symlinks, which allows a local user to modify the ownership of arbitrary files.
UpdatedRed Hat Linux 6.0 installs the /dev/pts file system with insecure modes, which allows local users to write to other tty devices.
Updatedscreen and rxvt in Red Hat Linux 6.0 do not properly set the modes of tty devices, which allows local users to write to other ttys.
UpdatedLinux cdwtools 093 and earlier allows local users to gain root privileges via the /tmp directory.
UpdatedBuffer overflows in Linux cdwtools 093 and earlier allows local users to gain root privileges.
UpdatedThe PPP wvdial.lxdialog script in wvdial 1.4 and earlier creates a .config file with world readable permissions, which allows a local attacker in the dialout group to access login and password information.
UpdatedBuffer overflow in INN 2.2.1 and earlier allows remote attackers to cause a denial of service via a maliciously formatted article.
UpdatedBuffer overflow in Trivial HTTP (THTTPd) allows remote attackers to cause a denial of service or execute arbitrary commands via a long If-Modified-Since header.
UpdatedORBit and gnome-session in Red Hat Linux 6.1 allows remote attackers to crash a program.
UpdatedORBit and esound in Red Hat Linux 6.1 do not use sufficiently random numbers, which allows local users to guess the authentication keys.
UpdatedPluggable Authentication Modules (PAM) in Red Hat Linux 6.1 does not properly lock access to disabled NIS accounts.
Updated- CVE-2000-0355: pg and pb in SuSE pbpg 1.x package allows an attacker to read arbitrary files. Unscored
pg and pb in SuSE pbpg 1.x package allows an attacker to read arbitrary files.
Updated mirror 2.8.x in Linux systems allows remote attackers to create files one level above the local target directory.
UpdatedPine 4.x allows a remote attacker to execute arbitrary commands via an index.html file which executes lynx and obtains a uudecoded file from a malicious web server, which is then executed by Pine.
UpdatedPine before version 4.21 does not properly filter shell metacharacters from URLs, which allows remote attackers to execute arbitrary commands via a malformed URL.
UpdatedSome packaging commands in SCO UnixWare 7.1.0 have insecure privileges, which allows local users to add or remove software packages.
UpdatedA debugging feature in NetworkICE ICEcap 2.0.23 and earlier is enabled, which allows a remote attacker to bypass the weak authentication and post unencrypted events.
UpdatedVulnerability in the passthru driver in SCO UnixWare 7.1.0 allows an attacker to cause a denial of service.
UpdatedA vulnerability in the Sendmail configuration file sendmail.cf as installed in SCO UnixWare 7.1.0 and earlier allows an attacker to gain root privileges.
UpdatedWindows 95 and Windows 98 allow a remote attacker to cause a denial of service via a NetBIOS session request packet with a NULL source name.
UpdatedAppleShare IP 6.1 and later allows a remote attacker to read potentially sensitive information via an invalid range request to the web server.
UpdatedThe on-line help system options in Cisco routers allows non-privileged users without "enabled" access to obtain sensitive information via the show command.
UpdatedThe knfsd NFS server in Linux kernel 2.2.x allows remote attackers to cause a denial of service via a negative size value.
UpdatedBuffer overflow in Sniffit 0.3.x with the -L logging option enabled allows remote attackers to execute arbitrary commands via a long MAIL FROM mail header.
UpdatedEudora 4.x allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by using a .lnk file that refers to the attachment, aka "Stealth Attachment."
UpdatedATRIUM Cassandra NNTP Server 1.10 allows remote attackers to cause a denial of service via a long login name.
UpdatedBuffer overflow in Gnomelib in SuSE Linux 6.3 allows local users to execute arbitrary commands via the DISPLAY environmental variable.
UpdatedZoneAlarm 2.1.10 and earlier does not filter UDP packets with a source port of 67, which allows remote attackers to bypass the firewall rules.
UpdatedConcurrent Versions Software (CVS) uses predictable temporary file names for locking, which allows local users to cause a denial of service by creating the lock directory before it is created for use by a legitimate CVS user.
UpdatedBuffer overflow in Xsun X server in Solaris 7 allows local users to gain root privileges via a long -dev parameter.
UpdatedLinux OpenLDAP server allows local users to modify arbitrary files via a symlink attack.
UpdatedThe resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS query results.
UpdatedThe Allaire Spectra container editor preview tool does not properly enforce object security, which allows an attacker to conduct unauthorized activities via an object-method that is added to the container object with a publishing rule.
Updatedtcpdump, Ethereal, and other sniffer packages allow remote attackers to cause a denial of service via malformed DNS packets in which a jump offset refers to itself, which causes tcpdump to enter an infinite loop while decompressing the packet.
UpdatedUltraBoard.pl or UltraBoard.cgi CGI scripts in UltraBoard 1.6 allows remote attackers to read arbitrary files via a pathname string that includes a dot dot (..) and ends with a null byte.
UpdatedBuffer overflow in Microsoft command processor (CMD.EXE) for Windows NT and Windows 2000 allows a local user to cause a denial of service via a long environment variable, aka the "Malformed Environment Variable" vulnerability.
UpdatedThe networking software in Windows 95 and Windows 98 allows remote attackers to execute commands via a long file name string, aka the "File Access URL" vulnerability.
UpdatedA Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embedded script in an HTML mail, aka the "Active Setup Control" vulnerability.
UpdatedWindows NT 4.0 generates predictable random TCP initial sequence numbers (ISN), which allows remote attackers to perform spoofing and session hijacking.
UpdatedMicrosoft Virtual Machine (VM) allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation, aka the "Virtual Machine Verifier" vulnerability.
UpdatedMeeting Maker uses weak encryption (a polyalphabetic substitution cipher) for passwords, which allows remote attackers to sniff and decrypt passwords for Meeting Maker accounts.
UpdatedThe Microsoft Jet database engine allows an attacker to execute commands via a database query, aka the "VBA Shell" vulnerability.
UpdatedpcAnywhere 8.x and 9.0 allows remote attackers to cause a denial of service via a TCP SYN scan, e.g. by nmap.
UpdatedThe Microsoft Jet database engine allows an attacker to modify text files via a database query, aka the "Text I-ISAM" vulnerability.
UpdatedThe passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters.
UpdatedBuffer overflow in IC Radius package allows a remote attacker to cause a denial of service via a long user name.
UpdatedQpopper 2.53 and 3.0 does not properly identify the \n string which identifies the end of message text, which allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 1023 characters long and ends in \n.
Updatedmail.local in Sendmail 8.10.x does not properly identify the .\n string which identifies the end of message text, which allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 2047 characters long and ends in .\n.
UpdatedAtrium Mercur Mail Server 3.2 allows local attackers to read other user's email and create arbitrary files via a dot dot (..) attack.
UpdatedBuffer overflow in Solaris 7 lpset allows local users to gain root privileges via a long -r option.
UpdatedBuffer overflow in Solaris 7 lp allows local users to gain root privileges via a long -d option.
Updatedtraceroute in NetBSD 1.3.3 and Linux systems allows local unprivileged users to modify the source address of the packets, which could be used in spoofing attacks.
Updatedtraceroute in NetBSD 1.3.3 and Linux systems allows local users to flood other systems by providing traceroute with a large waittime (-w) option, which is not parsed properly and sets the time delay for sending packets to zero.
UpdatedVulnerability in OpenBSD 2.6 allows a local user to change interface media configurations.
Updatedcron in OpenBSD 2.5 allows local users to gain root privileges via an argv[] that is not NULL terminated, which is passed to cron's fake popen function.
UpdatedThe Windows 2000 domain controller allows a malicious user to modify Active Directory information by modifying an unprotected attribute, aka the "Mixed Object Access" vulnerability.
UpdatedIP fragment assembly in OpenBSD 2.4 allows a remote attacker to cause a denial of service by sending a large number of fragmented packets.
UpdatedThe i386 trace-trap handling in OpenBSD 2.4 with DDB enabled allows a local user to cause a denial of service.
UpdatedInsecure file permissions for Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 in SCO UnixWare 7.0.x and 2.1.3 allow an attacker to gain root privileges.
UpdatedVulnerability in xserver in SCO UnixWare 2.1.x and OpenServer 5.05 and earlier allows an attacker to cause a denial of service which prevents access to reserved port numbers below 1024.
UpdatedBuffer overflow in calserver in SCO OpenServer allows remote attackers to gain root access via a long message.
UpdatedWindows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a denial of service by sending a large number of identical fragmented IP packets, aka jolt2 or the "IP Fragment Reassembly" vulnerability.
UpdatedMicrosoft IIS 4.0 and 5.0 with the IISADMPWD virtual directory installed allows a remote attacker to cause a denial of service via a malformed request to the inetinfo.exe program, aka the "Undelimited .HTR Request" vulnerability.
UpdatedQuake3 Arena allows malicious server operators to read or modify files on a client via a dot dot (..) attack.
UpdatedMicrosoft Index Server allows remote attackers to view the source code of ASP files by appending a %20 to the filename in the CiWebHitsFile argument to the null.htw URL.
UpdatedIpswitch IMAIL server 6.02 and earlier allows remote attackers to cause a denial of service via the AUTH CRAM-MD5 command.
UpdatedThe default encryption method of PcAnywhere 9.x uses weak encryption, which allows remote attackers to sniff and decrypt PcAnywhere or NT domain accounts.
UpdatedBuffer overflow in WebObjects.exe in the WebObjects Developer 4.5 package allows remote attackers to cause a denial of service via an HTTP request with long headers such as Accept.
UpdatedThe unattended installation of Windows 2000 with the OEMPreinstall option sets insecure permissions for the All Users and Default Users directories.
UpdatedAllaire Forums 2.0.5 allows remote attackers to bypass access restrictions to secure conferences via the rightAccessAllForums or rightModerateAllForums variables.
Updatedfcheck allows local users to gain privileges by embedding shell metacharacters into file names that are processed by fcheck.
UpdatedBuffer overflow in LCDproc allows remote attackers to gain root privileges via the screen_add command.
Updated- CVE-2000-0294: Buffer overflow in healthd for FreeBSD allows local users to gain root privileges. Unscored
Buffer overflow in healthd for FreeBSD allows local users to gain root privileges.
Updated aaa_base in SuSE Linux 6.3, and cron.daily in earlier versions, allow local users to delete arbitrary files by creating files whose names include spaces, which are then incorrectly interpreted by aaa_base when it deletes expired files from the /tmp directory.
UpdatedThe Adtran MX2800 M13 Multiplexer allows remote attackers to cause a denial of service via a ping flood to the Ethernet interface, which causes the device to crash.
UpdatedBuffer overflow in Star Office 5.1 allows attackers to cause a denial of service by embedding a long URL within a document.
Updated