10 April 2000

23 results · Feed

• Unscored —
  CVE-2000-0172 Public exploit

  The mtr program only uses a seteuid call when attempting to drop privileges, which could allow local users to gain root…

  Apr 10, 2000
• Unscored —
  CVE-2000-0186

  Buffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long…

  Apr 10, 2000
• Unscored —
  CVE-2000-0170 Public exploit

  Buffer overflow in the man program in Linux allows local users to gain privileges via the MANPAGER environmental variab…

  Apr 10, 2000
• Unscored —
  CVE-2000-0182

  iPlanet Web Server 4.1 allows remote attackers to cause a denial of service via a large number of GET commands, which c…

  Apr 10, 2000
• Unscored —
  CVE-2000-0196

  Buffer overflow in mhshow in the Linux nmh package allows remote attackers to execute commands via malformed MIME heade…

  Apr 10, 2000
• Unscored —
  CVE-2000-0211 Public exploit EPSS 21%

  The Windows Media server allows remote attackers to cause a denial of service via a series of client handshake packets …

  Apr 10, 2000
• Unscored —
  CVE-2000-0189

  ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the a…

  Apr 10, 2000
• Unscored —
  CVE-2000-0208 Public exploit

  The htdig (ht://Dig) CGI program htsearch allows remote attackers to read arbitrary files by enclosing the file name wi…

  Apr 10, 2000
• Unscored —
  CVE-2000-0218 Public exploit

  Buffer overflow in Linux mount and umount allows local users to gain root privileges via a long relative pathname.

  Apr 10, 2000
• Unscored —
  CVE-2000-0224 Public exploit

  ARCserve agent in SCO UnixWare 7.x allows local attackers to gain root privileges via a symlink attack.

  Apr 10, 2000
• Unscored —
  CVE-2000-0210 Public exploit

  The lit program in Sun Flex License Manager (FlexLM) follows symlinks, which allows local users to modify arbitrary fil…

  Apr 10, 2000
• Unscored —
  CVE-2000-0200 Public exploit EPSS 16%

  Buffer overflow in Microsoft Clip Art Gallery allows remote attackers to cause a denial of service or execute commands …

  Apr 10, 2000
• Unscored —
  CVE-2000-0178

  ServerIron switches by Foundry Networks have predictable TCP/IP sequence numbers, which allows remote attackers to spoo…

  Apr 10, 2000
• Unscored —
  CVE-2000-0194 Public exploit

  buildxconf in Corel Linux allows local users to modify or create arbitrary files via the -x or -f parameters.

  Apr 10, 2000
• Unscored —
  CVE-2000-0212 Public exploit

  InterAccess TelnetD Server 4.0 allows remote attackers to conduct a denial of service via malformed terminal client con…

  Apr 10, 2000
• Unscored —
  CVE-2000-0222 EPSS 15%

  The installation for Windows 2000 does not activate the Administrator password until the system has rebooted, which all…

  Apr 10, 2000
• Unscored —
  CVE-2000-0209

  Buffer overflow in Lynx 2.x allows remote attackers to crash Lynx and possibly execute commands via a long URL in a mal…

  Apr 10, 2000
• Unscored —
  CVE-2000-0207 Public exploit

  SGI InfoSearch CGI program infosrch.cgi allows remote attackers to execute commands via shell metacharacters.

  Apr 10, 2000
• Unscored —
  CVE-2000-0202

  Microsoft SQL Server 7.0 and Microsoft Data Engine (MSDE) 1.0 allow remote attackers to gain privileges via a malformed…

  Apr 10, 2000
• Unscored —
  CVE-2000-0217

  The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessi…

  Apr 10, 2000
• Unscored —
  CVE-2000-0201

  The window.showHelp() method in Internet Explorer 5.x does not restrict HTML help files (.chm) to be executed from the …

  Apr 10, 2000
• Unscored —
  CVE-2000-0221 Public exploit

  The Nautica Marlin bridge allows remote attackers to cause a denial of service via a zero length UDP packet to the SNMP…

  Apr 10, 2000
• Unscored —
  CVE-2000-0215

  Vulnerability in SCO cu program in UnixWare 7.x allows local users to gain privileges.

  Apr 10, 2000