Skip to content
OpenAdvisories

Archive

July 2000

Vulnerabilities first published in this month (UTC), newest first.

  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 10 
  11. 11 
  12. 12140
  13. 13 
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 1915
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
  31. 31 

155 results · Feed

  • Unscored —
    CVE-2000-0592 Public exploit

    Buffer overflows in POP3 service in WinProxy 2.0 and 2.0.1 allow remote attackers to execute arbitrary commands via lon…

  • Unscored —

    Buffer overflow in kon program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges…

  • Unscored —
    CVE-2000-0607 Public exploit

    Buffer overflow in fld program in Kanji on Console (KON) package on Linux may allow local users to gain root privileges…

  • Unscored —
    CVE-2000-0589 Public exploit

    SawMill 5.0.21 uses weak encryption to store passwords, which allows attackers to easily decrypt the password and modif…

  • Unscored —

    NetWin dMailWeb and cwMail 2.6g and earlier allows remote attackers to cause a denial of service via a long username pa…

  • Unscored —

    Windows 95 and Windows 98 do not properly process spoofed ARP packets, which allows remote attackers to overwrite stati…

  • Unscored —

    Blackboard CourseInfo 4.0 stores the local and SQL administrator user names and passwords in cleartext in a registry ke…

  • Unscored —
    CVE-2000-0572 Public exploit

    The Razor configuration management tool uses weak encryption for its password file, which allows local users to gain pr…

  • Unscored —
    CVE-2000-0617 Public exploit

    Buffer overflow in xconq and cconq game programs on Red Hat Linux allows local users to gain additional privileges via …

  • Unscored —

    NetWin dMailWeb and cwMail 2.6i and earlier allows remote attackers to cause a denial of service via a long POP paramet…

  • Unscored —

    Buffer overflow in xconq and cconq game programs on Red Hat Linux allows local users to gain additional privileges via …

  • Unscored —

    Tnef program in Linux systems allows remote attackers to overwrite arbitrary files via TNEF encoded compressed attachme…

  • Unscored —

    SGI MIPSPro compilers C, C++, F77 and F90 generate temporary files in /tmp with predictable file names, which could all…

  • Unscored —
    CVE-2000-0574 Public exploit EPSS 59%

    FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings th…

  • Unscored —
    CVE-2000-0580 Public exploit EPSS 16%

    Windows 2000 Server allows remote attackers to cause a denial of service by sending a continuous stream of binary zeros…

  • Unscored —

    InterScan VirusWall for Solaris doesn't scan files for viruses when a single HTTP request includes two GET commands.

  • Unscored —
    CVE-1999-0959 Public exploit

    IRIX startmidi program allows local users to modify arbitrary files via a symlink attack.

  • Unscored —

    The HTTP server in Cisco 7xx series routers 3.2 through 4.2 is enabled by default, which allows remote attackers to cha…

  • Unscored —
    CVE-1999-0820 Public exploit

    FreeBSD seyon allows users to gain privileges via a modified PATH variable for finding the xterm and seyon-emu commands.

  • Unscored —
    CVE-1999-0416 Public exploit

    Vulnerability in Cisco 7xx series routers allows a remote attacker to cause a system reload via a TCP connection to the…

  • Unscored —

    A legacy credential caching mechanism used in Windows 95 and Windows 98 systems allows attackers to read plaintext netw…

  • Unscored —

    The undocumented semconfig system call in BSD freezes the state of semaphores, which allows local users to cause a deni…

  • Unscored —
    CVE-2000-0045 Public exploit

    MySQL allows local users to modify passwords for arbitrary MySQL users via the GRANT privilege.

  • Unscored —
    CVE-2000-0174 Public exploit

    StarOffice StarScheduler web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.

  • Unscored —

    The Allaire Spectra container editor preview tool does not properly enforce object security, which allows an attacker t…

  • Unscored —

    Vulnerability in AIX 3.2.x and 4.x allows local users to gain write access to files on locally or remotely mounted AIX …

  • Unscored —
    CVE-2000-0262 Public exploit

    The AVM KEN! ISDN Proxy server allows remote attackers to cause a denial of service via a malformed request.

  • Unscored —

    Buffer overflow in StarOffice StarScheduler web server allows remote attackers to gain root access via a long GET comma…

  • Unscored —
    CVE-2000-0436 Public exploit

    MetaProducts Offline Explorer 1.2 and earlier allows remote attackers to access arbitrary files via a .. (dot dot) atta…

  • Unscored —
    CVE-2000-0427 Public exploit

    The Aladdin Knowledge Systems eToken device allows attackers with physical access to the device to obtain sensitive inf…

  • Unscored —
    CVE-2000-0018 Public exploit

    wmmon in FreeBSD allows local users to gain privileges via the .wmmonrc configuration file.

  • Unscored —
    CVE-2000-0492 Public exploit

    PassWD 1.2 uses weak encryption (trivial encoding) to store passwords, which allows an attacker who can read the passwo…

  • Unscored —

    ColdFusion Server 4.5.1 allows remote attackers to cause a denial of service by making repeated requests to a CFCACHE t…

  • Unscored —

    Netscape Communicator before version 4.73 and Navigator 4.07 do not properly validate SSL certificates, which allows re…

  • Unscored —
    CVE-2000-0418 Public exploit

    The Cayman 3220-H DSL router allows remote attackers to cause a denial of service via oversized ICMP echo (ping) reques…

  • Unscored —

    The command port for PGP Certificate Server 2.5.0 and 2.5.1 allows remote attackers to cause a denial of service if the…

  • Unscored —

    The BSD make program allows local users to modify files via a symlink attack when the -j option is being used.

  • Unscored —
    CVE-2000-0531 Public exploit

    Linux gpm program allows local users to cause a denial of service by flooding the /dev/gpmctl device with STREAM socket…

  • Unscored —

    Solaris dmispd dmi_cmd allows local users to fill up restricted disk space by adding files to the /var/dmi/db database.

  • Unscored —
    CVE-2000-0381 Public exploit

    The Gossamer Threads DBMan db.cgi CGI script allows remote attackers to view environmental variables and setup informat…