Archive
2 June 2000
Vulnerabilities first published on this day (UTC), newest first.
56 results · Feed
-
Unscored —CVE-1999-0493 Public exploit
rpc.statd allows remote attackers to forward RPC calls to the local operating system via the SM_MON and SM_NOTIFY comma…
-
Unscored —CVE-1999-0864 Public exploit
UnixWare programs that dump core allow a local user to modify files via a symlink attack on the ./core.pid file.
-
Unscored —CVE-1999-0225 EPSS 18%
Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed SMB logon request in which the actu…
-
Unscored —
Buffer overflow in NFS server on Linux allows attackers to execute commands via a long pathname.
-
Unscored —
FreeBSD mmap function allows users to modify append-only or immutable files.
-
Unscored —
Ultimate Bulletin Board stores data files in the cgi-bin directory, allowing remote attackers to view the data if an er…
-
Unscored —
Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with …
-
Unscored —CVE-1999-0859 Public exploit
Solaris arp allows local users to read files via the -f parameter, which lists lines in the file that do not parse prop…
-
Unscored —
Local users can perform a denial of service in Tripwire 1.2 and earlier using long filenames.
-
Unscored —
Buffer overflow in CommuniGatePro via a long string to the HTTP configuration port.
-
Unscored —
The INN inndstart program allows local users to gain privileges by specifying an alternate configuration file using the…
-
Unscored —CVE-1999-0836 Public exploit
UnixWare uidadmin allows local users to modify arbitrary files via a symlink attack.
-
Unscored —
The Guile plugin for the Gnumeric spreadsheet package allows attackers to execute arbitrary code.
-
Unscored —
login in Slackware 7.0 allows remote attackers to identify valid users on the system by reporting an encryption error w…
-
Unscored —CVE-1999-0031 EPSS 18%
JavaScript in Internet Explorer 3.x and 4.x, and Netscape 2.x, 3.x and 4.x, allows remote attackers to monitor a user's…
-
Unscored —
By default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force…
-
Unscored —CVE-1999-0866 Public exploit
Buffer overflow in UnixWare xauto program allows local users to gain root privilege.
-
Unscored —CVE-1999-0210 Public exploit
Automount daemon automountd allows local or remote users to gain privileges via shell metacharacters.
-
Unscored —CVE-1999-0491 Public exploit
The prompt parsing in bash allows a local user to execute commands as another user by creating a directory with the nam…
-
Unscored —CVE-1999-0838 Public exploit
Buffer overflow in Serv-U FTP 2.5 allows remote users to conduct a denial of service via the SITE command.
-
Unscored —
The Java Applet Security Manager implementation in Netscape Navigator 2.0 and Java Developer's Kit 1.0 allows an applet…
-
Unscored —
Vulnerabilities in UMN gopher and gopher+ versions 1.12 and 2.0x allow an intruder to read any files that can be access…
-
Unscored —
Buffer overflow in CDE Calendar Manager Service Daemon (rpc.cmsd).
-
Unscored —
The scriptlet.typelib ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote at…
-
Unscored —
NTMail does not disable the VRFY command, even if the administrator has explicitly disabled it.
-
Unscored —CVE-1999-0842 Public exploit
Symantec Mail-Gear 1.0 web interface server allows remote users to read arbitrary files via a .. (dot dot) attack.
-
Unscored —
Sendmail allows local users to reinitialize the aliases database via the newaliases command, then cause a denial of ser…
-
Unscored —CVE-1999-0118 Public exploit
AIX infod allows local users to gain root access through an X display.
-
Unscored —
The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x expos…
-
Unscored —
The SyGate Remote Management program does not properly restrict access to its administration service, which allows remo…
-
Unscored —CVE-2000-0234 Public exploit
The default configuration of Cobalt RaQ2 and RaQ3 as specified in access.conf allows remote attackers to view sensitive…
-
Unscored —CVE-2000-0231 Public exploit
Linux kreatecd trusts a user-supplied path that is used to find the cdrecord program, allowing local users to gain root…
-
Unscored —
IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, w…
-
Unscored —
Cisco Catalyst 5.4.x allows a user to gain access to the "enable" mode without a password.
-
Unscored —CVE-2000-0274 Public exploit
The Linux trustees kernel patch allows attackers to cause a denial of service by accessing a file or directory with a l…
-
Unscored —
Buffer overflow in healthd for FreeBSD allows local users to gain root privileges.
-
Unscored —
The Microsoft Jet database engine allows an attacker to modify text files via a database query, aka the "Text I-ISAM" v…
-
Unscored —CVE-2000-0228 EPSS 14%
Microsoft Windows Media License Manager allows remote attackers to cause a denial of service by sending a malformed req…
-
Unscored —
IIS 4.0 allows attackers to cause a denial of service by requesting a large buffer in a POST or PUT command which consu…
-
Unscored —CVE-2000-0327 EPSS 12%
Microsoft Virtual Machine (VM) allows remote attackers to escape the Java sandbox and execute commands via an applet co…