Archive
April 2000
Vulnerabilities first published in this month (UTC), newest first.
112 results · Feed
-
Unscored —CVE-2000-0024 EPSS 12%
IIS does not properly canonicalize URLs, potentially allowing remote attackers to bypass access restrictions in third-p…
-
Unscored —CVE-2000-0043 Public exploit
Buffer overflow in CamShot WebCam HTTP server allows remote attackers to execute commands via a long GET request.
-
Unscored —
DNS PRO allows remote attackers to conduct a denial of service via a large number of connections.
-
Unscored —
The Allaire Spectra Configuration Wizard allows remote attackers to cause a denial of service by repeatedly resubmittin…
-
Unscored —
Linux printtool sets the permissions of printer configuration files to be world-readable, which allows local attackers …
-
Unscored —CVE-2000-0192 Public exploit
The default installation of Caldera OpenLinux 2.3 includes the CGI program rpm_query, which allows remote attackers to …
-
Unscored —
The default installation of Debian GNU/Linux uses an insecure Master Boot Record (MBR) which allows a local user to boo…
-
Unscored —CVE-2000-0014 Public exploit
Denial of service in Savant web server via a null character in the requested URL.
-
Unscored —
NtImpersonateClientOfPort local procedure call in Windows NT 4.0 allows local users to gain privileges, aka "Spoofed LP…
-
Unscored —CVE-2000-0185 Public exploit
RealMedia RealServer reveals the real IP address of a Real Server, even if the address is supposed to be private.
-
Unscored —
Buffer overflow in CSM mail server allows remote attackers to cause a denial of service or execute commands via a long …
-
Unscored —
InterScan VirusWall SMTP scanner does not properly scan messages with malformed attachments.
-
Unscored —
Firewall-1 3.0 and 4.0 leaks packets with private IP address information, which could allow remote attackers to determi…
-
Unscored —CVE-1999-0720 Public exploit
The pt_chown command in Linux allows local users to modify TTY terminal devices that belong to other users.
-
Unscored —
Cfingerd with ALLOW_EXECUTION enabled does not properly drop privileges when it executes a program on behalf of the use…
-
Unscored —
sudo 1.5.x allows local users to execute arbitrary commands via a .. (dot dot) attack.
-
Unscored —
Denial of service in BSDi Symmetric Multiprocessing (SMP) when an fstat call is made when the system has a high CPU loa…
-
Unscored —
HPUX sysdiag allows local users to gain root privileges via a symlink attack during log file creation.
-
Unscored —CVE-1999-0906 Public exploit
Buffer overflow in sccw allows local users to gain root access via the HOME environmental variable.
-
Unscored —CVE-1999-0711 Public exploit
The oratclsh interpreter in Oracle 8.x Intelligent Agent for Unix allows local users to execute Tcl commands as root.
-
Unscored —
Buffer overflow in bootpd 2.4.3 and earlier via a long boot file location.
-
Unscored —
genfilt in the AIX Packet Filtering Module does not properly filter traffic to destination ports greater than 32767.
-
Unscored —
sdtcm_convert in Solaris 2.6 allows a local user to overwrite sensitive files via a symlink attack.
-
Unscored —
A remote attacker can read information from a Netscape user's cache via JavaScript.
-
Unscored —CVE-1999-0773 Public exploit
Buffer overflow in Solaris lpset program allows local users to gain root access.
-
Unscored —CVE-1999-0888 Public exploit
dbsnmp in Oracle Intelligent Agent allows local users to gain privileges by setting the ORACLE_HOME environmental varia…
-
Unscored —CVE-1999-1008 Public exploit
xsoldier program allows local users to gain root access via a long argument.
-
Unscored —
Buffer overflow in vchkpw/vpopmail POP authentication package allows remote attackers to gain root privileges via a lon…
-
Unscored —CVE-2000-0053 EPSS 15%
Microsoft Commercial Internet System (MCIS) IMAP server allows remote attackers to cause a denial of service via a malf…
-
Unscored —
HP Ignite-UX does not save /etc/passwd when it creates an image of a trusted system, which can set the password field t…
-
Unscored —CVE-2000-0057 Public exploit
Cold Fusion CFCACHE tag places temporary cache files within the web document root, allowing remote attackers to obtain …
-
Unscored —
Buffer overflow in Microsoft Rich Text Format (RTF) reader allows attackers to cause a denial of service via a malforme…
-
Unscored —
Buffer overflow in UnixWare ppptalk command allows local users to gain privileges via a long prompt argument.
-
Unscored —
The PMTU discovery procedure used by HP-UX 10.30 and 11.00 for determining the optimum MTU generates large amounts of t…
-
Unscored —CVE-2000-0100 Public exploit
The SMS Remote Control program is installed with insecure permissions, which allows local users to gain privileges by m…
-
Unscored —CVE-2000-0052 Public exploit
Red Hat userhelper program in the usermode package allows local users to gain root access via PAM and a .. (dot dot) at…
-
Unscored —
Axis 700 Network Scanner does not properly restrict access to administrator URLs, which allows users to bypass the pass…
-
Unscored —
Macros in War FTP 1.70 and 1.67b2 allow local or remote attackers to read arbitrary files or execute commands.
-
Unscored —
Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service via a large number of connectio…
-
Unscored —CVE-2000-0183 Public exploit
Buffer overflow in ircII 4.4 IRC client allows remote attackers to execute commands via the DCC chat capability.