Skip to content
OpenAdvisories

Archive

18 April 2000

Vulnerabilities first published on this day (UTC), newest first.

← March 2000 2000 / April /18 May 2000 →
  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 1023
  11. 11 
  12. 125
  13. 13 
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 1831
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 2534
  26. 2619
  27. 27 
  28. 28 
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

31 results · Feed

  • Unscored —
    CVE-1999-0720 Public exploit

    The pt_chown command in Linux allows local users to modify TTY terminal devices that belong to other users.

  • Unscored —
    CVE-1999-0813

    Cfingerd with ALLOW_EXECUTION enabled does not properly drop privileges when it executes a program on behalf of the use…

  • Unscored —
    CVE-1999-0958

    sudo 1.5.x allows local users to execute arbitrary commands via a .. (dot dot) attack.

  • Unscored —
    CVE-1999-0747

    Denial of service in BSDi Symmetric Multiprocessing (SMP) when an fstat call is made when the system has a high CPU loa…

  • Unscored —
    CVE-1999-0961

    HPUX sysdiag allows local users to gain root privileges via a symlink attack during log file creation.

  • Unscored —
    CVE-1999-0906 Public exploit

    Buffer overflow in sccw allows local users to gain root access via the HOME environmental variable.

  • Unscored —
    CVE-1999-0711 Public exploit

    The oratclsh interpreter in Oracle 8.x Intelligent Agent for Unix allows local users to execute Tcl commands as root.

  • Unscored —
    CVE-1999-0799

    Buffer overflow in bootpd 2.4.3 and earlier via a long boot file location.

  • Unscored —
    CVE-1999-0903

    genfilt in the AIX Packet Filtering Module does not properly filter traffic to destination ports greater than 32767.

  • Unscored —
    CVE-1999-0676

    sdtcm_convert in Solaris 2.6 allows a local user to overwrite sensitive files via a symlink attack.

  • Unscored —
    CVE-1999-0790

    A remote attacker can read information from a Netscape user's cache via JavaScript.

  • Unscored —
    CVE-1999-0773 Public exploit

    Buffer overflow in Solaris lpset program allows local users to gain root access.

  • Unscored —
    CVE-1999-0888 Public exploit

    dbsnmp in Oracle Intelligent Agent allows local users to gain privileges by setting the ORACLE_HOME environmental varia…

  • Unscored —
    CVE-1999-1008 Public exploit

    xsoldier program allows local users to gain root access via a long argument.

  • Unscored —
    CVE-2000-0091 Public exploit EPSS 13%

    Buffer overflow in vchkpw/vpopmail POP authentication package allows remote attackers to gain root privileges via a lon…

  • Unscored —
    CVE-2000-0053 EPSS 15%

    Microsoft Commercial Internet System (MCIS) IMAP server allows remote attackers to cause a denial of service via a malf…

  • Unscored —
    CVE-2000-0159

    HP Ignite-UX does not save /etc/passwd when it creates an image of a trusted system, which can set the password field t…

  • Unscored —
    CVE-2000-0057 Public exploit

    Cold Fusion CFCACHE tag places temporary cache files within the web document root, allowing remote attackers to obtain …

  • Unscored —
    CVE-2000-0073 Public exploit EPSS 21%

    Buffer overflow in Microsoft Rich Text Format (RTF) reader allows attackers to cause a denial of service via a malforme…

  • Unscored —
    CVE-2000-0099

    Buffer overflow in UnixWare ppptalk command allows local users to gain privileges via a long prompt argument.

  • Unscored —
    CVE-2000-0095

    The PMTU discovery procedure used by HP-UX 10.30 and 11.00 for determining the optimum MTU generates large amounts of t…

  • Unscored —
    CVE-2000-0100 Public exploit

    The SMS Remote Control program is installed with insecure permissions, which allows local users to gain privileges by m…

  • Unscored —
    CVE-2000-0052 Public exploit

    Red Hat userhelper program in the usermode package allows local users to gain root access via PAM and a .. (dot dot) at…

  • Unscored —
    CVE-2000-0144

    Axis 700 Network Scanner does not properly restrict access to administrator URLs, which allows users to bypass the pass…

  • Unscored —
    CVE-2000-0044

    Macros in War FTP 1.70 and 1.67b2 allow local or remote attackers to read arbitrary files or execute commands.

  • Unscored —
    CVE-2000-0140

    Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service via a large number of connectio…

  • Unscored —
    CVE-2000-0183 Public exploit

    Buffer overflow in ircII 4.4 IRC client allows remote attackers to execute commands via the DCC chat capability.

  • High —
    CVE-2000-0062

    Zope DTML implementation Improper Authentication

    The DTML implementation in the Z Object Publishing Environment (Zope) allows remote attackers to conduct unauthorized activities.

    zope PyPI
  • Unscored —
    CVE-2000-0131 Public exploit

    Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands.

  • Unscored —
    CVE-2000-0107 Public exploit

    Linux apcd program allows local attackers to modify arbitrary files via a symlink attack.

  • Unscored —
    CVE-2000-0083

    HP asecure creates the Audio Security File audio.sec with insecure permissions, which allows local users to cause a den…