Archive
25 April 2000
Vulnerabilities first published on this day (UTC), newest first.
14 results · Clear filters · Feed
-
Unscored —CVE-1999-0803 Public exploit
The fwluser script in AIX eNetwork Firewall allows local users to write to arbitrary files via a symlink attack.
-
Unscored —CVE-1999-0950 Public exploit
Buffer overflow in WFTPD FTP server allows remote attackers to gain root access via a series of MKD and CWD commands th…
-
Unscored —CVE-1999-0997 Public exploit
wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted…
-
Unscored —CVE-1999-1007 Public exploit
Buffer overflow in VDO Live Player allows remote attackers to execute commands on the VDO client via a malformed .vdo f…
-
Unscored —CVE-1999-1005 Public exploit
Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. (dot dot) …
-
Unscored —
The Delegate application proxy has several buffer overflows which allow a remote attacker to execute commands.
-
Unscored —CVE-2000-0206 Public exploit
The installation of Oracle 8.1.5.x on Linux follows symlinks and creates the orainstRoot.sh file with world-writeable p…
-
Unscored —CVE-2000-0012 Public exploit
Buffer overflow in w3-msql CGI program in miniSQL package allows remote attackers to execute commands.
-
Unscored —CVE-2000-0223 Public exploit
Buffer overflow in the wmcdplay CD player program for the WindowMaker desktop allows local users to gain root privilege…
-
Unscored —
WebWho+ whois.cgi program allows remote attackers to execute commands via shell metacharacters in the TLD parameter.
-
Unscored —CVE-2000-0043 Public exploit
Buffer overflow in CamShot WebCam HTTP server allows remote attackers to execute commands via a long GET request.
-
Unscored —CVE-2000-0192 Public exploit
The default installation of Caldera OpenLinux 2.3 includes the CGI program rpm_query, which allows remote attackers to …
-
Unscored —CVE-2000-0014 Public exploit
Denial of service in Savant web server via a null character in the requested URL.
-
Unscored —CVE-2000-0185 Public exploit
RealMedia RealServer reveals the real IP address of a Real Server, even if the address is supposed to be private.