Archive
12 July 2000
Vulnerabilities first published on this day (UTC), newest first.
140 results · Feed
-
Unscored —
InterScan VirusWall for Solaris doesn't scan files for viruses when a single HTTP request includes two GET commands.
-
Unscored —CVE-1999-0959 Public exploit
IRIX startmidi program allows local users to modify arbitrary files via a symlink attack.
-
Unscored —
The HTTP server in Cisco 7xx series routers 3.2 through 4.2 is enabled by default, which allows remote attackers to cha…
-
Unscored —CVE-1999-0820 Public exploit
FreeBSD seyon allows users to gain privileges via a modified PATH variable for finding the xterm and seyon-emu commands.
-
Unscored —CVE-1999-0416 Public exploit
Vulnerability in Cisco 7xx series routers allows a remote attacker to cause a system reload via a TCP connection to the…
-
Unscored —
A legacy credential caching mechanism used in Windows 95 and Windows 98 systems allows attackers to read plaintext netw…
-
Unscored —
The undocumented semconfig system call in BSD freezes the state of semaphores, which allows local users to cause a deni…
-
Unscored —CVE-2000-0045 Public exploit
MySQL allows local users to modify passwords for arbitrary MySQL users via the GRANT privilege.
-
Unscored —CVE-2000-0174 Public exploit
StarOffice StarScheduler web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.
-
Unscored —
The Allaire Spectra container editor preview tool does not properly enforce object security, which allows an attacker t…
-
Unscored —
Vulnerability in AIX 3.2.x and 4.x allows local users to gain write access to files on locally or remotely mounted AIX …
-
Unscored —CVE-2000-0262 Public exploit
The AVM KEN! ISDN Proxy server allows remote attackers to cause a denial of service via a malformed request.
-
Unscored —
Buffer overflow in StarOffice StarScheduler web server allows remote attackers to gain root access via a long GET comma…
-
Unscored —CVE-2000-0436 Public exploit
MetaProducts Offline Explorer 1.2 and earlier allows remote attackers to access arbitrary files via a .. (dot dot) atta…
-
Unscored —CVE-2000-0427 Public exploit
The Aladdin Knowledge Systems eToken device allows attackers with physical access to the device to obtain sensitive inf…
-
Unscored —CVE-2000-0018 Public exploit
wmmon in FreeBSD allows local users to gain privileges via the .wmmonrc configuration file.
-
Unscored —CVE-2000-0492 Public exploit
PassWD 1.2 uses weak encryption (trivial encoding) to store passwords, which allows an attacker who can read the passwo…
-
Unscored —
ColdFusion Server 4.5.1 allows remote attackers to cause a denial of service by making repeated requests to a CFCACHE t…
-
Unscored —
Netscape Communicator before version 4.73 and Navigator 4.07 do not properly validate SSL certificates, which allows re…
-
Unscored —CVE-2000-0418 Public exploit
The Cayman 3220-H DSL router allows remote attackers to cause a denial of service via oversized ICMP echo (ping) reques…
-
Unscored —
The command port for PGP Certificate Server 2.5.0 and 2.5.1 allows remote attackers to cause a denial of service if the…
-
Unscored —
The BSD make program allows local users to modify files via a symlink attack when the -j option is being used.
-
Unscored —CVE-2000-0531 Public exploit
Linux gpm program allows local users to cause a denial of service by flooding the /dev/gpmctl device with STREAM socket…
-
Unscored —
Solaris dmispd dmi_cmd allows local users to fill up restricted disk space by adding files to the /var/dmi/db database.
-
Unscored —CVE-2000-0381 Public exploit
The Gossamer Threads DBMan db.cgi CGI script allows remote attackers to view environmental variables and setup informat…
-
Unscored —CVE-2000-0407 Public exploit
Buffer overflow in Solaris netpr program allows local users to execute arbitrary commands via a long -p option.
-
Unscored —
Buffer overflow in Microsoft command processor (CMD.EXE) for Windows NT and Windows 2000 allows a local user to cause a…
-
Unscored —CVE-2000-0473 Public exploit
Buffer overflow in AnalogX SimpleServer 1.05 allows a remote attacker to cause a denial of service via a long GET reque…
-
Unscored —CVE-2000-0464 EPSS 13%
Internet Explorer 4.x and 5.x allows remote attackers to execute arbitrary commands via a buffer overflow in the Active…
-
Unscored —
The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in pl…
-
Unscored —CVE-2000-0527 Public exploit
userreg.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to execute arbitrary commands via sh…
-
Unscored —CVE-2000-0411 Public exploit
Matt Wright's FormMail CGI script allows remote attackers to obtain environmental variables via the env_report paramete…
-
Unscored —
OpenSSL 0.9.4 and OpenSSH for FreeBSD do not properly check for the existence of the /dev/random or /dev/urandom device…
-
Unscored —CVE-2000-0545 Public exploit
Buffer overflow in mailx mail command (aka Mail) on Linux systems allows local users to gain privileges via a long -c (…
-
Unscored —
Cobalt RaQ2 and RaQ3 does not properly set the access permissions and ownership for files that are uploaded via FrontPa…
-
Unscored —
Vulnerabilities in the KDE kvt terminal program allow local users to gain root privileges.
-
Unscored —CVE-2000-0419 EPSS 21%
The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthor…
-
Unscored —
The Windows 2000 domain controller allows a malicious user to modify Active Directory information by modifying an unpro…
-
Unscored —
Buffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root privileges.
-
Unscored —
Buffer overflow in FreeBSD libmytinfo library allows local users to execute commands via a long TERMCAP environmental v…