April 2000

112 results · Feed

• High —
  CVE-2000-0062

  Zope DTML implementation Improper Authentication

  The DTML implementation in the Z Object Publishing Environment (Zope) allows remote attackers to conduct unauthorized activities.

  zope PyPI
  Apr 18, 2000
• Unscored —
  CVE-2000-0131 Public exploit

  Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands.

  Apr 18, 2000
• Unscored —
  CVE-2000-0107 Public exploit

  Linux apcd program allows local attackers to modify arbitrary files via a symlink attack.

  Apr 18, 2000
• Unscored —
  CVE-2000-0083

  HP asecure creates the Audio Security File audio.sec with insecure permissions, which allows local users to cause a den…

  Apr 18, 2000
• Unscored —
  CVE-2000-0227 Public exploit

  The Linux 2.2.x kernel does not restrict the number of Unix domain sockets as defined by the wmem_max parameter, which …

  Apr 12, 2000
• Unscored —
  CVE-2000-0242 Public exploit

  WindMail allows remote attackers to read arbitrary files or execute commands via shell metacharacters.

  Apr 12, 2000
• Unscored —
  CVE-2000-0244 Public exploit

  The Citrix ICA (Independent Computing Architecture) protocol uses weak encryption (XOR) for user authentication.

  Apr 12, 2000
• Unscored —
  CVE-2000-0241

  vqSoft vqServer stores sensitive information such as passwords in cleartext in the server.cfg file, which allows attack…

  Apr 12, 2000
• Unscored —
  CVE-2000-0239 Public exploit

  Buffer overflow in the MERCUR WebView WebMail server allows remote attackers to cause a denial of service via a long ma…

  Apr 12, 2000
• Unscored —
  CVE-2000-0172 Public exploit

  The mtr program only uses a seteuid call when attempting to drop privileges, which could allow local users to gain root…

  Apr 10, 2000
• Unscored —
  CVE-2000-0186

  Buffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long…

  Apr 10, 2000
• Unscored —
  CVE-2000-0170 Public exploit

  Buffer overflow in the man program in Linux allows local users to gain privileges via the MANPAGER environmental variab…

  Apr 10, 2000
• Unscored —
  CVE-2000-0182

  iPlanet Web Server 4.1 allows remote attackers to cause a denial of service via a large number of GET commands, which c…

  Apr 10, 2000
• Unscored —
  CVE-2000-0196

  Buffer overflow in mhshow in the Linux nmh package allows remote attackers to execute commands via malformed MIME heade…

  Apr 10, 2000
• Unscored —
  CVE-2000-0211 Public exploit EPSS 21%

  The Windows Media server allows remote attackers to cause a denial of service via a series of client handshake packets …

  Apr 10, 2000
• Unscored —
  CVE-2000-0189

  ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the a…

  Apr 10, 2000
• Unscored —
  CVE-2000-0208 Public exploit

  The htdig (ht://Dig) CGI program htsearch allows remote attackers to read arbitrary files by enclosing the file name wi…

  Apr 10, 2000
• Unscored —
  CVE-2000-0218 Public exploit

  Buffer overflow in Linux mount and umount allows local users to gain root privileges via a long relative pathname.

  Apr 10, 2000
• Unscored —
  CVE-2000-0224 Public exploit

  ARCserve agent in SCO UnixWare 7.x allows local attackers to gain root privileges via a symlink attack.

  Apr 10, 2000
• Unscored —
  CVE-2000-0210 Public exploit

  The lit program in Sun Flex License Manager (FlexLM) follows symlinks, which allows local users to modify arbitrary fil…

  Apr 10, 2000
• Unscored —
  CVE-2000-0200 Public exploit EPSS 16%

  Buffer overflow in Microsoft Clip Art Gallery allows remote attackers to cause a denial of service or execute commands …

  Apr 10, 2000
• Unscored —
  CVE-2000-0178

  ServerIron switches by Foundry Networks have predictable TCP/IP sequence numbers, which allows remote attackers to spoo…

  Apr 10, 2000
• Unscored —
  CVE-2000-0194 Public exploit

  buildxconf in Corel Linux allows local users to modify or create arbitrary files via the -x or -f parameters.

  Apr 10, 2000
• Unscored —
  CVE-2000-0212 Public exploit

  InterAccess TelnetD Server 4.0 allows remote attackers to conduct a denial of service via malformed terminal client con…

  Apr 10, 2000
• Unscored —
  CVE-2000-0222 EPSS 15%

  The installation for Windows 2000 does not activate the Administrator password until the system has rebooted, which all…

  Apr 10, 2000
• Unscored —
  CVE-2000-0209

  Buffer overflow in Lynx 2.x allows remote attackers to crash Lynx and possibly execute commands via a long URL in a mal…

  Apr 10, 2000
• Unscored —
  CVE-2000-0207 Public exploit

  SGI InfoSearch CGI program infosrch.cgi allows remote attackers to execute commands via shell metacharacters.

  Apr 10, 2000
• Unscored —
  CVE-2000-0202

  Microsoft SQL Server 7.0 and Microsoft Data Engine (MSDE) 1.0 allow remote attackers to gain privileges via a malformed…

  Apr 10, 2000
• Unscored —
  CVE-2000-0217

  The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessi…

  Apr 10, 2000
• Unscored —
  CVE-2000-0201

  The window.showHelp() method in Internet Explorer 5.x does not restrict HTML help files (.chm) to be executed from the …

  Apr 10, 2000
• Unscored —
  CVE-2000-0221 Public exploit

  The Nautica Marlin bridge allows remote attackers to cause a denial of service via a zero length UDP packet to the SNMP…

  Apr 10, 2000
• Unscored —
  CVE-2000-0215

  Vulnerability in SCO cu program in UnixWare 7.x allows local users to gain privileges.

  Apr 10, 2000