Archive
April 2000
Vulnerabilities first published in this month (UTC), newest first.
55 results · Clear filters · Feed
-
Unscored —CVE-2000-0293 Public exploit
aaa_base in SuSE Linux 6.3, and cron.daily in earlier versions, allow local users to delete arbitrary files by creating…
-
Unscored —CVE-2000-0275 Public exploit
CRYPTOCard CryptoAdmin for PalmOS uses weak encryption to store a user's PIN number, which allows an attacker with acce…
-
Unscored —
Buffer overflows in htimage.exe and Imagemap.exe in FrontPage 97 and 98 Server Extensions allow a user to conduct activ…
-
Unscored —CVE-2000-0299 Public exploit
Buffer overflow in WebObjects.exe in the WebObjects Developer 4.5 package allows remote attackers to cause a denial of …
-
Unscored —CVE-2000-0300 Public exploit
The default encryption method of PcAnywhere 9.x uses weak encryption, which allows remote attackers to sniff and decryp…
-
Unscored —CVE-2000-0250 Public exploit
The crypt function in QNX uses weak encryption, which allows local users to decrypt passwords.
-
Unscored —
Buffer overflow in University of Washington imapd version 4.7 allows users with a valid account to execute commands via…
-
Unscored —CVE-2000-0286 Public exploit
X fontserver xfs allows local users to cause a denial of service via malformed input to the server.
-
Unscored —CVE-2000-0295 Public exploit
Buffer overflow in LCDproc allows remote attackers to gain root privileges via the screen_add command.
-
Unscored —CVE-2000-0280 Public exploit
Buffer overflow in the RealNetworks RealPlayer client versions 6 and 7 allows remote attackers to cause a denial of ser…
-
Unscored —
The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a backdoor password th…
-
Unscored —CVE-1999-0803 Public exploit
The fwluser script in AIX eNetwork Firewall allows local users to write to arbitrary files via a symlink attack.
-
Unscored —CVE-1999-0950 Public exploit
Buffer overflow in WFTPD FTP server allows remote attackers to gain root access via a series of MKD and CWD commands th…
-
Unscored —CVE-1999-0997 Public exploit
wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted…
-
Unscored —CVE-1999-1007 Public exploit
Buffer overflow in VDO Live Player allows remote attackers to execute commands on the VDO client via a malformed .vdo f…
-
Unscored —CVE-1999-1005 Public exploit
Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. (dot dot) …
-
Unscored —
The Delegate application proxy has several buffer overflows which allow a remote attacker to execute commands.
-
Unscored —CVE-2000-0206 Public exploit
The installation of Oracle 8.1.5.x on Linux follows symlinks and creates the orainstRoot.sh file with world-writeable p…
-
Unscored —CVE-2000-0012 Public exploit
Buffer overflow in w3-msql CGI program in miniSQL package allows remote attackers to execute commands.
-
Unscored —CVE-2000-0223 Public exploit
Buffer overflow in the wmcdplay CD player program for the WindowMaker desktop allows local users to gain root privilege…
-
Unscored —
WebWho+ whois.cgi program allows remote attackers to execute commands via shell metacharacters in the TLD parameter.
-
Unscored —CVE-2000-0043 Public exploit
Buffer overflow in CamShot WebCam HTTP server allows remote attackers to execute commands via a long GET request.
-
Unscored —CVE-2000-0192 Public exploit
The default installation of Caldera OpenLinux 2.3 includes the CGI program rpm_query, which allows remote attackers to …
-
Unscored —CVE-2000-0014 Public exploit
Denial of service in Savant web server via a null character in the requested URL.
-
Unscored —CVE-2000-0185 Public exploit
RealMedia RealServer reveals the real IP address of a Real Server, even if the address is supposed to be private.
-
Unscored —CVE-1999-0720 Public exploit
The pt_chown command in Linux allows local users to modify TTY terminal devices that belong to other users.
-
Unscored —CVE-1999-0906 Public exploit
Buffer overflow in sccw allows local users to gain root access via the HOME environmental variable.
-
Unscored —CVE-1999-0711 Public exploit
The oratclsh interpreter in Oracle 8.x Intelligent Agent for Unix allows local users to execute Tcl commands as root.
-
Unscored —CVE-1999-0773 Public exploit
Buffer overflow in Solaris lpset program allows local users to gain root access.
-
Unscored —CVE-1999-0888 Public exploit
dbsnmp in Oracle Intelligent Agent allows local users to gain privileges by setting the ORACLE_HOME environmental varia…
-
Unscored —CVE-1999-1008 Public exploit
xsoldier program allows local users to gain root access via a long argument.
-
Unscored —
Buffer overflow in vchkpw/vpopmail POP authentication package allows remote attackers to gain root privileges via a lon…
-
Unscored —CVE-2000-0057 Public exploit
Cold Fusion CFCACHE tag places temporary cache files within the web document root, allowing remote attackers to obtain …
-
Unscored —
Buffer overflow in Microsoft Rich Text Format (RTF) reader allows attackers to cause a denial of service via a malforme…
-
Unscored —CVE-2000-0100 Public exploit
The SMS Remote Control program is installed with insecure permissions, which allows local users to gain privileges by m…
-
Unscored —CVE-2000-0052 Public exploit
Red Hat userhelper program in the usermode package allows local users to gain root access via PAM and a .. (dot dot) at…
-
Unscored —CVE-2000-0183 Public exploit
Buffer overflow in ircII 4.4 IRC client allows remote attackers to execute commands via the DCC chat capability.
-
Unscored —CVE-2000-0131 Public exploit
Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands.
-
Unscored —CVE-2000-0107 Public exploit
Linux apcd program allows local attackers to modify arbitrary files via a symlink attack.
-
Unscored —CVE-2000-0227 Public exploit
The Linux 2.2.x kernel does not restrict the number of Unix domain sockets as defined by the wmem_max parameter, which …