Archive
February 2000
Vulnerabilities first published in this month (UTC), newest first.
97 results · Clear filters · Feed
-
Unscored —CVE-2000-0154 Public exploit
The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack.
-
Unscored —CVE-2000-0163 Public exploit
asmon and ascpu in FreeBSD allow local users to gain root privileges via a configuration file.
-
Unscored —CVE-2000-0155 Public exploit
Windows NT Autorun executes the autorun.inf file on non-removable media, which allows local attackers to specify an alt…
-
Unscored —CVE-2000-0167 Public exploit
IIS Inetinfo.exe allows local users to cause a denial of service by creating a mail file with a long name and a .txt.em…
-
Unscored —CVE-2000-0142 Public exploit
The authentication protocol in Timbuktu Pro 2.0b650 allows remote attackers to cause a denial of service via connection…
-
Unscored —CVE-2000-0133 Public exploit
Buffer overflows in Tiny FTPd 0.52 beta3 FTP server allows users to execute commands via the STOR, RNTO, MKD, XMKD, RMD…
-
Unscored —
Sample Internet Data Query (IDQ) scripts in IIS 3 and 4 allow remote attackers to read files via a .. (dot dot) attack.
-
Unscored —CVE-2000-0119 Public exploit
The default configurations for McAfee Virus Scan and Norton Anti-Virus virus checkers do not check files in the RECYCLE…
-
Unscored —
Microsoft Java Virtual Machine allows remote attackers to read files via the getSystemResourceAsStream function.
-
Unscored —CVE-2000-0109 Public exploit
The mcsp Client Site Processor system (MultiCSP) in Standard and Poor's ComStock is installed with several accounts tha…
-
Unscored —CVE-2000-0118 Public exploit
The Red Hat Linux su program does not log failed password guesses if the su process is killed before it times out, whic…
-
Unscored —CVE-2000-0125 Public exploit
wwwthreads does not properly cleanse numeric data or table names that are passed to SQL queries, which allows remote at…
-
Unscored —CVE-2000-0129 Public exploit
Buffer overflow in the SHGetPathFromIDList function of the Serv-U FTP server allows attackers to cause a denial of serv…
-
Unscored —
Outlook Express 5.01 and Internet Explorer 5.01 allow remote attackers to view a user's email messages via a script tha…
-
Unscored —CVE-2000-0096 Public exploit
Buffer overflow in qpopper 3.0 beta versions allows local users to gain privileges via a long LIST command.
-
Unscored —
Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST requ…
-
Unscored —CVE-2000-0136 Public exploit
The Cart32 shopping cart application allows remote users to modify sensitive purchase information via hidden form field…
-
Unscored —
Buffer overflow in ProFTPD, wu-ftpd, and beroftpd allows remote attackers to gain root access via a series of MKD and C…
-
Unscored —
Denial of service to NT mail servers including Ipswitch, Mdaemon, and Exchange through a buffer overflow in the SMTP HE…
-
Unscored —CVE-1999-0477 Public exploit
The Expression Evaluator in the ColdFusion Application Server allows a remote attacker to upload files to the server vi…
-
Unscored —CVE-1999-0841 Public exploit
Buffer overflow in CDE mailtool allows local users to gain root privileges via a long MIME Content-Type.
-
Unscored —
In IIS, an attacker could determine a real path using a request for a non-existent URL that would be interpreted by Per…
-
Unscored —CVE-1999-0347 Public exploit
Internet Explorer 4.01 allows remote attackers to read local files and spoof web pages via a "%01" character in an "abo…
-
Medium 4.0
ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.
-
Unscored —CVE-1999-0467 Public exploit
The Webcom CGI Guestbook programs wguest.exe and rguest.exe allow a remote attacker to read arbitrary files using the "…
-
Unscored —CVE-1999-0767 Public exploit
Buffer overflow in Solaris libc, ufsrestore, and rcp via LC_MESSAGES environmental variable.
-
Unscored —CVE-1999-0030 Public exploit
root privileges via buffer overflow in xlock command on SGI IRIX systems.
-
Unscored —CVE-1999-0306 Public exploit
buffer overflow in HP xlock program.
-
Unscored —CVE-1999-0985 Public exploit
CC Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry.
-
Unscored —CVE-1999-0949 Public exploit
Buffer overflow in canuum program for Canna input system allows local users to gain root privileges.
-
Unscored —CVE-1999-0948 Public exploit
Buffer overflow in uum program for Canna input system allows local users to gain root privileges.
-
Unscored —
The ARP protocol allows any host to spoof ARP replies and poison the ARP cache to conduct IP address spoofing or a deni…
-
Unscored —CVE-1999-0860 Public exploit
Solaris chkperm allows local users to read files owned by bin via the VMSYS environmental variable and a symlink attack.
-
Unscored —CVE-1999-0822 Public exploit
Buffer overflow in Qpopper (qpop) 3.0 allows remote root access via AUTH command.
-
Unscored —CVE-1999-0925 Public exploit
UnityMail allows remote attackers to conduct a denial of service via a large number of MIME headers.
-
Unscored —CVE-1999-0988 Public exploit
UnixWare pkgtrans allows local users to read arbitrary files via a symlink attack.
-
Unscored —
Teardrop IP denial of service.
-
Medium 5.9
An SNMP community name is the default (e.g. public), null, or missing.
-
Unscored —
A mail server is explicitly configured to allow SMTP mail relay, which allows abuse by spammers.
-
Unscored —CVE-1999-0455 Public exploit
The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server…