Skip to content
OpenAdvisories

Archive

March 2000

Vulnerabilities first published in this month (UTC), newest first.

← February 2000 2000 / March April 2000 →
  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 2270
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

70 results · Feed

  • Unscored —
    CVE-2000-0088

    Buffer overflow in the conversion utilities for Japanese, Korean and Chinese Word 5 documents allows an attacker to exe…

  • Unscored —
    CVE-2000-0039 Public exploit

    AltaVista search engine allows remote attackers to read files above the document root via a .. (dot dot) in the query.c…

  • Unscored —
    CVE-2000-0149 Public exploit

    Zeus web server allows remote attackers to view the source code for CGI programs via a null character (%00) at the end …

  • Unscored —
    CVE-2000-0197

    The Windows NT scheduler uses the drive mapping of the interactive user who is currently logged onto the system, which …

  • Unscored —
    CVE-2000-0148

    MySQL 3.22 allows remote attackers to bypass password authentication and access a database via a short check string.

  • Unscored —
    CVE-2000-0187 Public exploit

    EZShopper 3.0 loadpage.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or exec…

  • Unscored —
    CVE-2000-0097 Public exploit EPSS 36%

    The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed …

  • Unscored —
    CVE-2000-0031

    The initscripts package in Red Hat Linux allows local users to gain privileges via a symlink attack.

  • Unscored —
    CVE-2000-0199

    When a new SQL Server is registered in Enterprise Manager for Microsoft SQL Server 7.0 and the "Always prompt for login…

  • Unscored —
    CVE-2000-0176

    The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the serv…

  • Unscored —
    CVE-2000-0003

    Buffer overflow in UnixWare rtpm program allows local users to gain privileges via a long environmental variable.

  • Unscored —
    CVE-2000-0040

    glFtpD allows local users to gain privileges via metacharacters in the SITE ZIPCHK command.

  • Unscored —
    CVE-2000-0205

    Trend Micro OfficeScan allows remote attackers to replay administrative commands and modify the configuration of Office…

  • Unscored —
    CVE-2000-0203

    The Trend Micro OfficeScan client tmlisten.exe allows remote attackers to cause a denial of service via malformed data …

  • Unscored —
    CVE-2000-0214 Public exploit

    FTP Explorer uses weak encryption for storing the username, password, and profile of FTP sites.

  • Unscored —
    CVE-2000-0219 Public exploit

    Red Hat 6.0 allows local users to gain root access by booting single user and hitting ^C at the password prompt.

  • Unscored —
    CVE-2000-0204 Public exploit

    The Trend Micro OfficeScan client allows remote attackers to cause a denial of service by making 5 connections to port …

  • Unscored —
    CVE-2000-0022

    Lotus Domino HTTP server does not properly disable anonymous access for the cgi-bin directory.

  • Unscored —
    CVE-2000-0162

    The Microsoft virtual machine (VM) in Internet Explorer 4.x and 5.x allows a remote attacker to read files via a malici…

  • Unscored —
    CVE-2000-0089

    The rdisk utility in Microsoft Terminal Server Edition and Windows NT 4.0 stores registry hive information in a tempora…

  • Unscored —
    CVE-2000-0152 Public exploit

    Remote attackers can cause a denial of service in Novell BorderManager 3.5 by pressing the enter key in a telnet connec…

  • Unscored —
    CVE-2000-0198 Public exploit

    Buffer overflow in POP3 and IMAP servers in the MERCUR mail server suite allows remote attackers to cause a denial of s…

  • Unscored —
    CVE-2000-0098 EPSS 49%

    Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Inter…

  • Unscored —
    CVE-2000-0188

    EZShopper 3.0 search.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execut…

  • Unscored —
    CVE-2000-0037 Public exploit

    Majordomo wrapper allows local users to gain privileges by specifying an alternate configuration file.

  • Unscored —
    CVE-2000-0213 Public exploit

    The Sambar server includes batch files ECHO.BAT and HELLO.BAT in the CGI directory, which allow remote attackers to exe…

  • Unscored —
    CVE-2000-0041

    Macintosh systems generate large ICMP datagrams in response to malformed datagrams, allowing them to be used as amplifi…

  • Unscored —
    CVE-2000-0150

    Check Point Firewall-1 allows remote attackers to bypass port access restrictions on an FTP server by forcing it to sen…

  • Unscored —
    CVE-2000-0139 Public exploit

    Internet Anywhere POP3 Mail Server allows local users to cause a denial of service via a malformed RETR command.

  • Unscored —
    CVE-2000-0036

    Outlook Express 5 for Macintosh downloads attachments to HTML mail without prompting the user, aka the "HTML Mail Attac…