CVE-2000-0xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
990 records · Page 9 of 10
AOL Instant Messenger (AIM) client allows remote attackers to cause a denial of service via a message with a malformed ASCII value.
UpdatedColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onrequestend.cfm files.
UpdatedEZShopper 3.0 search.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute commands via shell metacharacters.
UpdatedEZShopper 3.0 loadpage.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute commands via shell metacharacters.
UpdatedBuffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long command line argument.
UpdatedRealMedia RealServer reveals the real IP address of a Real Server, even if the address is supposed to be private.
UpdatedLinux printtool sets the permissions of printer configuration files to be world-readable, which allows local attackers to obtain printer share passwords.
UpdatedBuffer overflow in ircII 4.4 IRC client allows remote attackers to execute commands via the DCC chat capability.
UpdatediPlanet Web Server 4.1 allows remote attackers to cause a denial of service via a large number of GET commands, which consumes memory and causes a kernel panic.
UpdatedFirewall-1 3.0 and 4.0 leaks packets with private IP address information, which could allow remote attackers to determine the real IP address of the host that is making the connection.
UpdatedSojourn search engine allows remote attackers to read arbitrary files via a .. (dot dot) attack.
UpdatedHP OpenView OmniBack 2.55 allows remote attackers to cause a denial of service via a large number of connections to port 5555.
UpdatedServerIron switches by Foundry Networks have predictable TCP/IP sequence numbers, which allows remote attackers to spoof or hijack sessions.
UpdatedDNSTools CGI applications allow remote attackers to execute arbitrary commands via shell metacharacters.
UpdatedThe default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the server by requesting a URL for a directory or file that does not exist.
UpdatedBuffer overflow in StarOffice StarScheduler web server allows remote attackers to gain root access via a long GET command.
UpdatedStarOffice StarScheduler web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.
UpdatedVulnerability in the EELS system in SCO UnixWare 7.1.x allows remote attackers to cause a denial of service.
UpdatedThe mtr program only uses a seteuid call when attempting to drop privileges, which could allow local users to gain root privileges.
Updatedatsadc in the atsar package for Linux does not properly check the permissions of an output file, which allows local users to gain root privileges.
UpdatedBuffer overflow in the man program in Linux allows local users to gain privileges via the MANPAGER environmental variable.
UpdatedBatch files in the Oracle web listener ows-bin directory allow remote attackers to execute commands via a malformed URL that includes '?&'.
UpdatedMicrosoft Windows 9x operating systems allow an attacker to cause a denial of service via a pathname that includes file device names, aka the "DOS Device in Path Name" vulnerability.
UpdatedIIS Inetinfo.exe allows local users to cause a denial of service by creating a mail file with a long name and a .txt.eml extension in the pickup directory.
UpdatedBuffer overflow in the InterAccess telnet server TelnetD allows remote attackers to execute commands via a long login name.
UpdatedThe Delegate application proxy has several buffer overflows which allow a remote attacker to execute commands.
UpdatedThe installation of Sun Internet Mail Server (SIMS) creates a world-readable file that allows local users to obtain passwords.
Updatedasmon and ascpu in FreeBSD allow local users to gain root privileges via a configuration file.
UpdatedThe Microsoft virtual machine (VM) in Internet Explorer 4.x and 5.x allows a remote attacker to read files via a malicious Java applet that escapes the Java sandbox, aka the "VM File Reading" vulnerability.
UpdatedSample web sites on Microsoft Site Server 3.0 Commerce Edition do not validate an identification number, which allows remote attackers to execute SQL commands.
UpdatedThe Microsoft Active Setup ActiveX component in Internet Explorer 4.x and 5.x allows a remote attacker to install software components without prompting the user by stating that the software's manufacturer is Microsoft.
UpdatedHP Ignite-UX does not save /etc/passwd when it creates an image of a trusted system, which can set the password field to a blank and allow an attacker to gain privileges.
UpdatedBuffer overflow in MMDF server allows remote attackers to gain privileges via a long MAIL FROM command to the SMTP daemon.
UpdatedNetBSD ptrace call on VAX allows local users to gain privileges by modifying the PSL contents in the debugging process.
UpdatedInternet Explorer 4.x and 5.x allows remote web servers to access files on the client that are outside of its security domain, aka the "Image Source Redirect" vulnerability.
UpdatedWindows NT Autorun executes the autorun.inf file on non-removable media, which allows local attackers to specify an alternate program to execute when other users access a drive.
UpdatedThe ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack.
UpdatedFrontPage Personal Web Server (PWS) allows remote attackers to read files via a .... (dot dot) attack.
UpdatedRemote attackers can cause a denial of service in Novell BorderManager 3.5 by pressing the enter key in a telnet connection to port 2000.
UpdatedGNU make follows symlinks when it reads a Makefile from stdin, which allows other local users to execute commands.
UpdatedCheck Point Firewall-1 allows remote attackers to bypass port access restrictions on an FTP server by forcing it to send malicious packets that Firewall-1 misinterprets as a valid 227 response to a client's PASV attempt.
UpdatedZeus web server allows remote attackers to view the source code for CGI programs via a null character (%00) at the end of a URL.
UpdatedMySQL 3.22 allows remote attackers to bypass password authentication and access a database via a short check string.
Updatedsnmpd in SCO OpenServer has an SNMP community string that is writable by default, which allows local attackers to modify the host's configuration.
UpdatedThe Java Server in the Novell GroupWise Web Access Enhancement Pack allows remote attackers to cause a denial of service via a long URL to the servlet.
UpdatedThe libguile.so library file used by gnucash in Debian GNU/Linux is installed with world-writable permissions.
UpdatedAxis 700 Network Scanner does not properly restrict access to administrator URLs, which allows users to bypass the password protection via a .. (dot dot) attack.
UpdatedThe SSH protocol server sshd allows local users without shell access to redirect a TCP connection through a service that uses the standard system password database for authentication, such as POP or FTP.
UpdatedThe authentication protocol in Timbuktu Pro 2.0b650 allows remote attackers to cause a denial of service via connections to port 407 and 1417.
UpdatedInfopop Ultimate Bulletin Board (UBB) allows remote attackers to execute commands via shell metacharacters in the topic hidden field.
UpdatedInternet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service via a large number of connections.
UpdatedInternet Anywhere POP3 Mail Server allows local users to cause a denial of service via a malformed RETR command.
UpdatedA system has a distributed denial of service (DDOS) attack master, agent, or zombie installed, such as (1) Trinoo, (2) Tribe Flood Network (TFN), (3) Tribe Flood Network 2000 (TFN2K), (4) stacheldraht, (5) mstream, or (6) shaft.
UpdatedThe CartIt shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
UpdatedThe Cart32 shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
UpdatedThe @Retail shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
UpdatedThe Check It Out shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
UpdatedBuffer overflows in Tiny FTPd 0.52 beta3 FTP server allows users to execute commands via the STOR, RNTO, MKD, XMKD, RMD, XRMD, APPE, SIZE, and RNFR commands.
UpdatedMicrosoft Java Virtual Machine allows remote attackers to read files via the getSystemResourceAsStream function.
UpdatedBuffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands.
Updated- CVE-2000-0130: Buffer overflow in SCO scohelp program allows remote attackers to execute commands. Unscored
Buffer overflow in SCO scohelp program allows remote attackers to execute commands.
Updated Buffer overflow in the SHGetPathFromIDList function of the Serv-U FTP server allows attackers to cause a denial of service by performing a LIST command on a malformed .lnk file.
UpdatedThe Finger Server 0.82 allows remote attackers to execute commands via shell metacharacters.
UpdatedThe Webspeed configuration program does not properly disable access to the WSMadmin utility, which allows remote attackers to gain privileges via wsisa.dll.
UpdatedSample Internet Data Query (IDQ) scripts in IIS 3 and 4 allow remote attackers to read files via a .. (dot dot) attack.
Updatedwwwthreads does not properly cleanse numeric data or table names that are passed to SQL queries, which allows remote attackers to gain privileges for wwwthreads forums.
UpdatedsurfCONTROL SuperScout does not properly asign a category to web sites with a . (dot) at the end, which may allow users to bypass web access restrictions.
UpdatedThe shopping cart application provided with Filemaker allows remote users to modify sensitive purchase information via hidden form fields.
UpdatedFrontpage Server Extensions allows remote attackers to determine the physical path of a virtual directory via a GET request to the htimage.exe CGI program.
UpdatedThe Recycle Bin utility in Windows NT and Windows 2000 allows local users to read or modify files by creating a subdirectory with the victim's SID in the recycler directory, aka the "Recycle Bin Creation" vulnerability.
UpdatedThe Remote Access Service invoke.cfm template in Allaire Spectra 1.0 allows users to bypass authentication via the bAuthenticated parameter.
UpdatedThe default configurations for McAfee Virus Scan and Norton Anti-Virus virus checkers do not check files in the RECYCLED folder that is used by the Windows Recycle Bin utility, which allows attackers to store malicious code without detection.
UpdatedThe Red Hat Linux su program does not log failed password guesses if the su process is killed before it times out, which allows local attackers to conduct brute force password guessing.
UpdatedThe siteUserMod.cgi program in Cobalt RaQ2 servers allows any Site Administrator to modify passwords for other users, site administrators, and possibly admin (root).
UpdatedFirewall-1 does not properly filter script tags, which allows remote attackers to bypass the "Strip Script Tags" restriction by including an extra < in front of the SCRIPT tag.
UpdatedIIS allows local users to cause a denial of service via invalid regular expressions in a Visual Basic script in an ASP page.
UpdatedFrontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the /_vti_bin/ virtual directory.
UpdatedThe SyGate Remote Management program does not properly restrict access to its administration service, which allows remote attackers to cause a denial of service, or access network traffic statistics.
UpdatedThe default installation of Debian GNU/Linux uses an insecure Master Boot Record (MBR) which allows a local user to boot from a floppy disk during the installation.
UpdatedThe RightFax web client uses predictable session numbers, which allows remote attackers to hijack user sessions.
UpdatedThe WebSiteTool shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
UpdatedThe mcsp Client Site Processor system (MultiCSP) in Standard and Poor's ComStock is installed with several accounts that have no passwords or easily guessable default passwords.
UpdatedThe Intellivend shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
UpdatedLinux apcd program allows local attackers to modify arbitrary files via a symlink attack.
UpdatedThe EasyCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
UpdatedOutlook Express 5.01 and Internet Explorer 5.01 allow remote attackers to view a user's email messages via a script that accesses a variable that references subsequent email messages that are read by the client.
UpdatedThe Shoptron shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
UpdatedThe SmartCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
UpdatedThe SalesCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
UpdatedThe Make-a-Store OrderPage shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
UpdatedThe SMS Remote Control program is installed with insecure permissions, which allows local users to gain privileges by modifying or replacing the program.
UpdatedBuffer overflow in UnixWare ppptalk command allows local users to gain privileges via a long prompt argument.
UpdatedMicrosoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file that does not exist.
UpdatedThe WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argument" vulnerability.
UpdatedBuffer overflow in qpopper 3.0 beta versions allows local users to gain privileges via a long LIST command.
UpdatedThe PMTU discovery procedure used by HP-UX 10.30 and 11.00 for determining the optimum MTU generates large amounts of traffic in response to small packets, allowing remote attackers to cause the system to be used as a packet amplifier.
Updatedprocfs in BSD systems allows local users to gain root privileges by modifying the /proc/pid/mem interface via a modified file descriptor for stderr.
UpdatedAn installation of Red Hat uses DES password encryption with crypt() for the initial password, instead of md5.
UpdatedThe BSD make program allows local users to modify files via a symlink attack when the -j option is being used.
UpdatedBuffer overflow in vchkpw/vpopmail POP authentication package allows remote attackers to gain root privileges via a long username or password.
Updated