Archive
February 2000
Vulnerabilities first published in this month (UTC), newest first.
377 results · Feed
-
Unscored —CVE-2000-0153 EPSS 14%
FrontPage Personal Web Server (PWS) allows remote attackers to read files via a .... (dot dot) attack.
-
Unscored —
Buffer overflow in MMDF server allows remote attackers to gain privileges via a long MAIL FROM command to the SMTP daem…
-
Unscored —CVE-2000-0154 Public exploit
The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack.
-
Unscored —CVE-2000-0163 Public exploit
asmon and ascpu in FreeBSD allow local users to gain root privileges via a configuration file.
-
Unscored —CVE-2000-0155 Public exploit
Windows NT Autorun executes the autorun.inf file on non-removable media, which allows local attackers to specify an alt…
-
Unscored —
The Microsoft Active Setup ActiveX component in Internet Explorer 4.x and 5.x allows a remote attacker to install softw…
-
Unscored —CVE-2000-0167 Public exploit
IIS Inetinfo.exe allows local users to cause a denial of service by creating a mail file with a long name and a .txt.em…
-
Unscored —
The SSH protocol server sshd allows local users without shell access to redirect a TCP connection through a service tha…
-
Unscored —
GNU make follows symlinks when it reads a Makefile from stdin, which allows other local users to execute commands.
-
Unscored —CVE-2000-0142 Public exploit
The authentication protocol in Timbuktu Pro 2.0b650 allows remote attackers to cause a denial of service via connection…
-
Unscored —
snmpd in SCO OpenServer has an SNMP community string that is writable by default, which allows local attackers to modif…
-
Unscored —
A system has a distributed denial of service (DDOS) attack master, agent, or zombie installed, such as (1) Trinoo, (2) …
-
Unscored —CVE-2000-0133 Public exploit
Buffer overflows in Tiny FTPd 0.52 beta3 FTP server allows users to execute commands via the STOR, RNTO, MKD, XMKD, RMD…
-
Unscored —
The Shoptron shopping cart application allows remote users to modify sensitive purchase information via hidden form fie…
-
Unscored —
Sample Internet Data Query (IDQ) scripts in IIS 3 and 4 allow remote attackers to read files via a .. (dot dot) attack.
-
Unscored —
The EasyCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fie…
-
Unscored —CVE-2000-0119 Public exploit
The default configurations for McAfee Virus Scan and Norton Anti-Virus virus checkers do not check files in the RECYCLE…
-
Unscored —
The WebSiteTool shopping cart application allows remote users to modify sensitive purchase information via hidden form …
-
Unscored —
Microsoft Java Virtual Machine allows remote attackers to read files via the getSystemResourceAsStream function.
-
Unscored —CVE-2000-0109 Public exploit
The mcsp Client Site Processor system (MultiCSP) in Standard and Poor's ComStock is installed with several accounts tha…
-
Unscored —CVE-2000-0122 EPSS 21%
Frontpage Server Extensions allows remote attackers to determine the physical path of a virtual directory via a GET req…
-
Unscored —
The shopping cart application provided with Filemaker allows remote users to modify sensitive purchase information via …
-
Unscored —CVE-2000-0118 Public exploit
The Red Hat Linux su program does not log failed password guesses if the su process is killed before it times out, whic…
-
Unscored —CVE-2000-0125 Public exploit
wwwthreads does not properly cleanse numeric data or table names that are passed to SQL queries, which allows remote at…
-
Unscored —
An installation of Red Hat uses DES password encryption with crypt() for the initial password, instead of md5.
-
Unscored —
The Intellivend shopping cart application allows remote users to modify sensitive purchase information via hidden form …
-
Unscored —CVE-2000-0129 Public exploit
Buffer overflow in the SHGetPathFromIDList function of the Serv-U FTP server allows attackers to cause a denial of serv…
-
Unscored —
The Make-a-Store OrderPage shopping cart application allows remote users to modify sensitive purchase information via h…
-
Unscored —
Outlook Express 5.01 and Internet Explorer 5.01 allow remote attackers to view a user's email messages via a script tha…
-
Unscored —
The Check It Out shopping cart application allows remote users to modify sensitive purchase information via hidden form…
-
Unscored —
The CartIt shopping cart application allows remote users to modify sensitive purchase information via hidden form field…
-
Unscored —CVE-2000-0115 EPSS 10%
IIS allows local users to cause a denial of service via invalid regular expressions in a Visual Basic script in an ASP …
-
Unscored —
The @Retail shopping cart application allows remote users to modify sensitive purchase information via hidden form fiel…
-
Unscored —
The SmartCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fi…
-
Unscored —CVE-2000-0096 Public exploit
Buffer overflow in qpopper 3.0 beta versions allows local users to gain privileges via a long LIST command.
-
Unscored —
The SalesCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fi…
-
Unscored —
Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST requ…
-
Unscored —
surfCONTROL SuperScout does not properly asign a category to web sites with a . (dot) at the end, which may allow users…
-
Unscored —CVE-2000-0136 Public exploit
The Cart32 shopping cart application allows remote users to modify sensitive purchase information via hidden form field…
-
Unscored —
A URL for a WWW directory allows auto-indexing, which provides a list of all files in that directory if it does not con…