Skip to content
OpenAdvisories

Archive

April 2000

Vulnerabilities first published in this month (UTC), newest first.

← March 2000 2000 / April May 2000 →
  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 1023
  11. 11 
  12. 125
  13. 13 
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 1831
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 2534
  26. 2619
  27. 27 
  28. 28 
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

55 results · Clear filters · Feed

  • Unscored —
    CVE-2000-0242 Public exploit

    WindMail allows remote attackers to read arbitrary files or execute commands via shell metacharacters.

  • Unscored —
    CVE-2000-0244 Public exploit

    The Citrix ICA (Independent Computing Architecture) protocol uses weak encryption (XOR) for user authentication.

  • Unscored —
    CVE-2000-0239 Public exploit

    Buffer overflow in the MERCUR WebView WebMail server allows remote attackers to cause a denial of service via a long ma…

  • Unscored —
    CVE-2000-0172 Public exploit

    The mtr program only uses a seteuid call when attempting to drop privileges, which could allow local users to gain root…

  • Unscored —
    CVE-2000-0170 Public exploit

    Buffer overflow in the man program in Linux allows local users to gain privileges via the MANPAGER environmental variab…

  • Unscored —
    CVE-2000-0211 Public exploit EPSS 21%

    The Windows Media server allows remote attackers to cause a denial of service via a series of client handshake packets …

  • Unscored —
    CVE-2000-0208 Public exploit

    The htdig (ht://Dig) CGI program htsearch allows remote attackers to read arbitrary files by enclosing the file name wi…

  • Unscored —
    CVE-2000-0218 Public exploit

    Buffer overflow in Linux mount and umount allows local users to gain root privileges via a long relative pathname.

  • Unscored —
    CVE-2000-0224 Public exploit

    ARCserve agent in SCO UnixWare 7.x allows local attackers to gain root privileges via a symlink attack.

  • Unscored —
    CVE-2000-0210 Public exploit

    The lit program in Sun Flex License Manager (FlexLM) follows symlinks, which allows local users to modify arbitrary fil…

  • Unscored —
    CVE-2000-0200 Public exploit EPSS 16%

    Buffer overflow in Microsoft Clip Art Gallery allows remote attackers to cause a denial of service or execute commands …

  • Unscored —
    CVE-2000-0194 Public exploit

    buildxconf in Corel Linux allows local users to modify or create arbitrary files via the -x or -f parameters.

  • Unscored —
    CVE-2000-0212 Public exploit

    InterAccess TelnetD Server 4.0 allows remote attackers to conduct a denial of service via malformed terminal client con…

  • Unscored —
    CVE-2000-0207 Public exploit

    SGI InfoSearch CGI program infosrch.cgi allows remote attackers to execute commands via shell metacharacters.

  • Unscored —
    CVE-2000-0221 Public exploit

    The Nautica Marlin bridge allows remote attackers to cause a denial of service via a zero length UDP packet to the SNMP…