Archive
April 2000
Vulnerabilities first published in this month (UTC), newest first.
112 results · Feed
-
Unscored —CVE-2000-0293 Public exploit
aaa_base in SuSE Linux 6.3, and cron.daily in earlier versions, allow local users to delete arbitrary files by creating…
-
Unscored —CVE-2000-0275 Public exploit
CRYPTOCard CryptoAdmin for PalmOS uses weak encryption to store a user's PIN number, which allows an attacker with acce…
-
Unscored —
Buffer overflows in htimage.exe and Imagemap.exe in FrontPage 97 and 98 Server Extensions allow a user to conduct activ…
-
Unscored —CVE-2000-0299 Public exploit
Buffer overflow in WebObjects.exe in the WebObjects Developer 4.5 package allows remote attackers to cause a denial of …
-
Unscored —CVE-2000-0300 Public exploit
The default encryption method of PcAnywhere 9.x uses weak encryption, which allows remote attackers to sniff and decryp…
-
Unscored —
Buffer overflow in the Napster client beta 5 allows remote attackers to cause a denial of service via a long message.
-
Unscored —
The default permissions for the Cryptography\Offload registry key used by the OffloadModExpo in Windows NT 4.0 allows l…
-
Unscored —CVE-2000-0250 Public exploit
The crypt function in QNX uses weak encryption, which allows local users to decrypt passwords.
-
Unscored —
Buffer overflow in University of Washington imapd version 4.7 allows users with a valid account to execute commands via…
-
Unscored —CVE-2000-0266 EPSS 16%
Internet Explorer 5.01 allows remote attackers to bypass the cross frame security policy via a malicious applet that in…
-
Unscored —
read-passwd and other Lisp functions in Emacs 20 do not properly clear the history of recently typed keys, which allows…
-
Unscored —
Infonautics getdoc.cgi allows remote attackers to bypass the payment phase for accessing documents via a modified form …
-
Unscored —
Emacs 20 does not properly set permissions for a slave PTY device when starting a new subprocess, which allows local us…
-
Unscored —CVE-2000-0286 Public exploit
X fontserver xfs allows local users to cause a denial of service via malformed input to the server.
-
Unscored —CVE-2000-0295 Public exploit
Buffer overflow in LCDproc allows remote attackers to gain root privileges via the screen_add command.
-
Unscored —
Buffer overflow in Star Office 5.1 allows attackers to cause a denial of service by embedding a long URL within a docum…
-
Unscored —CVE-2000-0280 Public exploit
Buffer overflow in the RealNetworks RealPlayer client versions 6 and 7 allows remote attackers to cause a denial of ser…
-
Unscored —
The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a backdoor password th…
-
Unscored —
The make-temp-name Lisp function in Emacs 20 creates temporary files with predictable names, which allows attackers to …
-
Unscored —
Cisco 675 routers running CBOS allow remote attackers to establish telnet sessions if an exec or superuser password has…
-
Unscored —
Firewall-1 does not properly restrict access to LDAP attributes.
-
Unscored —
In Sendmail, attackers can gain root privileges via SMTP by specifying an improper "mail from" address and an invalid "…
-
Unscored —
KDE klock allows local users to kill arbitrary processes by specifying an arbitrary PID in the .kss.pid file.
-
Unscored —
iChat ROOMS Webserver allows remote attackers to read arbitrary files via a .. (dot dot) attack.
-
Unscored —CVE-1999-0803 Public exploit
The fwluser script in AIX eNetwork Firewall allows local users to write to arbitrary files via a symlink attack.
-
Unscored —
KDE kppp allows local users to create a directory in an arbitrary location via the HOME environmental variable.
-
Unscored —CVE-1999-0950 Public exploit
Buffer overflow in WFTPD FTP server allows remote attackers to gain root access via a series of MKD and CWD commands th…
-
Unscored —
MajorCool mj_key_cache program allows local users to modify files via a symlink attack.
-
Unscored —
A Windows NT user can use SUBST to map a drive letter to a folder, which is not unmapped after the user logs off, poten…
-
Unscored —
KDE allows local users to execute arbitrary commands by setting the KDEDIR environmental variable to modify the search …
-
Unscored —CVE-1999-0997 Public exploit
wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted…
-
Unscored —CVE-1999-1007 Public exploit
Buffer overflow in VDO Live Player allows remote attackers to execute commands on the VDO client via a malformed .vdo f…
-
Unscored —CVE-1999-1005 Public exploit
Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. (dot dot) …
-
Unscored —
An SSH 1.2.27 server allows a client to use the "none" cipher, even if it is not allowed by the server policy.
-
Unscored —
The Delegate application proxy has several buffer overflows which allow a remote attacker to execute commands.
-
Unscored —CVE-2000-0206 Public exploit
The installation of Oracle 8.1.5.x on Linux follows symlinks and creates the orainstRoot.sh file with world-writeable p…
-
Unscored —CVE-2000-0012 Public exploit
Buffer overflow in w3-msql CGI program in miniSQL package allows remote attackers to execute commands.
-
Unscored —CVE-2000-0223 Public exploit
Buffer overflow in the wmcdplay CD player program for the WindowMaker desktop allows local users to gain root privilege…
-
Unscored —
WebWho+ whois.cgi program allows remote attackers to execute commands via shell metacharacters in the TLD parameter.
-
Unscored —
The Allaire Spectra Webtop allows authenticated users to access other Webtop sections by specifying explicit URLs.