Skip to content
OpenAdvisories

Archive

June 2000

Vulnerabilities first published in this month (UTC), newest first.

← May 2000 2000 / June July 2000 →
  1. 1 
  2. 256
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 1518
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

74 results · Feed

  • Unscored —
    CVE-1999-0696 Public exploit EPSS 12%

    Buffer overflow in CDE Calendar Manager Service Daemon (rpc.cmsd).

  • Unscored —
    CVE-1999-0668 Public exploit EPSS 23%

    The scriptlet.typelib ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote at…

  • Unscored —
    CVE-1999-0819 Public exploit EPSS 15%

    NTMail does not disable the VRFY command, even if the administrator has explicitly disabled it.

  • Unscored —
    CVE-1999-0842 Public exploit

    Symantec Mail-Gear 1.0 web interface server allows remote users to read arbitrary files via a .. (dot dot) attack.

  • Unscored —
    CVE-1999-0976

    Sendmail allows local users to reinitialize the aliases database via the newaliases command, then cause a denial of ser…

  • Unscored —
    CVE-1999-0118 Public exploit

    AIX infod allows local users to gain root access through an X display.

  • Unscored —
    CVE-1999-1011 Public exploit EPSS 77%

    The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x expos…

  • Unscored —
    CVE-2000-0113

    The SyGate Remote Management program does not properly restrict access to its administration service, which allows remo…

  • Unscored —
    CVE-2000-0234 Public exploit

    The default configuration of Cobalt RaQ2 and RaQ3 as specified in access.conf allows remote attackers to view sensitive…

  • Unscored —
    CVE-2000-0231 Public exploit

    Linux kreatecd trusts a user-supplied path that is used to find the cdrecord program, allowing local users to gain root…

  • Unscored —
    CVE-2000-0246 Public exploit EPSS 80%

    IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, w…

  • Unscored —
    CVE-2000-0267

    Cisco Catalyst 5.4.x allows a user to gain access to the "enable" mode without a password.

  • Unscored —
    CVE-2000-0274 Public exploit

    The Linux trustees kernel patch allows attackers to cause a denial of service by accessing a file or directory with a l…

  • Unscored —
    CVE-2000-0294

    Buffer overflow in healthd for FreeBSD allows local users to gain root privileges.

  • Unscored —
    CVE-2000-0323

    The Microsoft Jet database engine allows an attacker to modify text files via a database query, aka the "Text I-ISAM" v…

  • Unscored —
    CVE-2000-0228 EPSS 14%

    Microsoft Windows Media License Manager allows remote attackers to cause a denial of service by sending a malformed req…

  • Unscored —
    CVE-2000-0226

    IIS 4.0 allows attackers to cause a denial of service by requesting a large buffer in a POST or PUT command which consu…

  • Unscored —
    CVE-2000-0327 EPSS 12%

    Microsoft Virtual Machine (VM) allows remote attackers to escape the Java sandbox and execute commands via an applet co…

  • Unscored —
    CVE-2000-0169 Public exploit EPSS 27%

    Batch files in the Oracle web listener ows-bin directory allow remote attackers to execute commands via a malformed URL…

  • Unscored —
    CVE-2000-0004

    ZBServer Pro allows remote attackers to read source code for executable files by inserting a . (dot) into the URL.

  • Unscored —
    CVE-2000-0258 EPSS 19%

    IIS 4.0 and 5.0 allows remote attackers to cause a denial of service by sending many URLs with a large number of escape…

  • Unscored —
    CVE-2000-0329 Public exploit

    A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embed…

  • Unscored —
    CVE-2000-0268

    Cisco IOS 11.x and 12.x allows remote attackers to cause a denial of service by sending the ENVIRON option to the Telne…

  • Unscored —
    CVE-2000-0230 Public exploit

    Buffer overflow in imwheel allows local users to gain root privileges via the imwheel-solo script and a long HOME envir…

  • Unscored —
    CVE-2000-0229 Public exploit

    gpm-root in the gpm package does not properly drop privileges, which allows local users to gain privileges by starting …

  • Unscored —
    CVE-2000-0171 Public exploit

    atsadc in the atsar package for Linux does not properly check the permissions of an output file, which allows local use…

  • Unscored —
    CVE-2000-0328 EPSS 25%

    Windows NT 4.0 generates predictable random TCP initial sequence numbers (ISN), which allows remote attackers to perfor…

  • Unscored —
    CVE-2000-0235

    Buffer overflow in the huh program in the orville-write package allows local users to gain root privileges.

  • Unscored —
    CVE-2000-0232 Public exploit

    Microsoft TCP/IP Printing Services, aka Print Services for Unix, allows an attacker to cause a denial of service via a …

  • Unscored —
    CVE-2000-0245 Public exploit EPSS 12%

    Vulnerability in SGI IRIX objectserver daemon allows remote attackers to create user accounts.

  • Unscored —
    CVE-2000-0233

    SuSE Linux IMAP server allows remote attackers to bypass IMAP authentication and gain privileges.

  • Unscored —
    CVE-2000-0330 Public exploit EPSS 15%

    The networking software in Windows 95 and Windows 98 allows remote attackers to execute commands via a long file name s…

  • Unscored —
    CVE-2000-0260 Public exploit EPSS 14%

    Buffer overflow in the dvwssr.dll DLL in Microsoft Visual Interdev 1.0 allows users to cause a denial of service or exe…

  • Unscored —
    CVE-2000-0277

    Microsoft Excel 97 and 2000 does not warn the user when executing Excel Macro Language (XLM) macros in external text fi…