Archive
June 2000
Vulnerabilities first published in this month (UTC), newest first.
36 results · Clear filters · Feed
-
Unscored —CVE-2000-0423 Public exploit
Buffer overflow in Netwin DNEWSWEB CGI program allows remote attackers to execute arbitrary commands via long parameter…
-
Unscored —CVE-2000-0449 Public exploit
Omnis Studio 2.4 uses weak encryption (trivial encoding) for encrypting database fields.
-
Unscored —CVE-2000-0444 Public exploit
HP Web JetAdmin 6.0 allows remote attackers to cause a denial of service via a malformed URL to port 8000.
-
Unscored —
The shtml.exe program in the FrontPage extensions package of IIS 4.0 and 5.0 allows remote attackers to determine the p…
-
Unscored —CVE-2000-0412 Public exploit
The gnapster and knapster clients for Napster do not properly restrict access only to MP3 files, which allows remote at…
-
Unscored —CVE-2000-0384 Public exploit
NetStructure 7110 and 7180 have undocumented accounts (servnow, root, and wizard) whose passwords are easily guessable …
-
Unscored —CVE-2000-0400 Public exploit
The Microsoft Active Movie ActiveX Control in Internet Explorer 5 does not restrict which file types can be downloaded,…
-
Unscored —CVE-2000-0429 Public exploit
A backdoor password in Cart32 3.0 and earlier allows remote attackers to execute arbitrary commands.
-
Unscored —CVE-1999-0493 Public exploit
rpc.statd allows remote attackers to forward RPC calls to the local operating system via the SM_MON and SM_NOTIFY comma…
-
Unscored —CVE-1999-0864 Public exploit
UnixWare programs that dump core allow a local user to modify files via a symlink attack on the ./core.pid file.
-
Unscored —
Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with …
-
Unscored —CVE-1999-0859 Public exploit
Solaris arp allows local users to read files via the -f parameter, which lists lines in the file that do not parse prop…
-
Unscored —CVE-1999-0836 Public exploit
UnixWare uidadmin allows local users to modify arbitrary files via a symlink attack.
-
Unscored —CVE-1999-0866 Public exploit
Buffer overflow in UnixWare xauto program allows local users to gain root privilege.
-
Unscored —CVE-1999-0210 Public exploit
Automount daemon automountd allows local or remote users to gain privileges via shell metacharacters.
-
Unscored —CVE-1999-0491 Public exploit
The prompt parsing in bash allows a local user to execute commands as another user by creating a directory with the nam…
-
Unscored —CVE-1999-0838 Public exploit
Buffer overflow in Serv-U FTP 2.5 allows remote users to conduct a denial of service via the SITE command.
-
Unscored —
Buffer overflow in CDE Calendar Manager Service Daemon (rpc.cmsd).
-
Unscored —
The scriptlet.typelib ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote at…
-
Unscored —
NTMail does not disable the VRFY command, even if the administrator has explicitly disabled it.
-
Unscored —CVE-1999-0842 Public exploit
Symantec Mail-Gear 1.0 web interface server allows remote users to read arbitrary files via a .. (dot dot) attack.
-
Unscored —CVE-1999-0118 Public exploit
AIX infod allows local users to gain root access through an X display.
-
Unscored —
The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x expos…
-
Unscored —CVE-2000-0234 Public exploit
The default configuration of Cobalt RaQ2 and RaQ3 as specified in access.conf allows remote attackers to view sensitive…
-
Unscored —CVE-2000-0231 Public exploit
Linux kreatecd trusts a user-supplied path that is used to find the cdrecord program, allowing local users to gain root…
-
Unscored —
IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, w…
-
Unscored —CVE-2000-0274 Public exploit
The Linux trustees kernel patch allows attackers to cause a denial of service by accessing a file or directory with a l…
-
Unscored —
Batch files in the Oracle web listener ows-bin directory allow remote attackers to execute commands via a malformed URL…
-
Unscored —CVE-2000-0329 Public exploit
A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embed…
-
Unscored —CVE-2000-0230 Public exploit
Buffer overflow in imwheel allows local users to gain root privileges via the imwheel-solo script and a long HOME envir…
-
Unscored —CVE-2000-0229 Public exploit
gpm-root in the gpm package does not properly drop privileges, which allows local users to gain privileges by starting …
-
Unscored —CVE-2000-0171 Public exploit
atsadc in the atsar package for Linux does not properly check the permissions of an output file, which allows local use…
-
Unscored —CVE-2000-0232 Public exploit
Microsoft TCP/IP Printing Services, aka Print Services for Unix, allows an attacker to cause a denial of service via a …
-
Unscored —
Vulnerability in SGI IRIX objectserver daemon allows remote attackers to create user accounts.
-
Unscored —
The networking software in Windows 95 and Windows 98 allows remote attackers to execute commands via a long file name s…
-
Unscored —
Buffer overflow in the dvwssr.dll DLL in Microsoft Visual Interdev 1.0 allows users to cause a denial of service or exe…